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ABSTRACT 


A literature survey concerning the problem of measuring 
safety performance was accomplished with primary emphasis to 
the problem of evaluating occupational injury and illnesses 
safety performance. 

Having accomplished this survey a new methodology for 
measuring occupational safety performance 1S proposed based 
Saeecost” criterion. 

Finally an analysis of real safety occupational data is 
accomplished since analysis of safety data is considered to 


be a basic step of the proposed methodology. 
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i See RODUCTION 


Although safety is generally recognized as an essential 
part in overall system operation, incorporation of safety 
procedures and methodology is largely superficial and is 
usually directed at maintaining minimum legal standards at 
Minimum cost. According to Lowrence (1976) safety is defined 
as a judgment of the acceptability of risk, and risk, in turn, 
aS a measure of the probability and severity of harm to human 
health. Here it 1S proper to point out that since cost is 
incorporated in any severity of harm to human health, safety 
memaetunction of cost. 

A function is safe if its risks are judged to be acceptable. 
This definition emphasizes the relativity and judgemental 
nature of the concept of safety. It also implies that two 
very different activities are required for determining how 
safe things are: 

meme Measuring risk, an Objective but probabilistic 

muesSult - 

eee wucdging the acceptability of that risk (judging 

Safety), a matter of personal, social and economic 
value judgement. 

Fallure to appreciate how safety determinations resolve 
into the two discrete activities, is at the root of many mis- 
understandings. In one of the most common instances, it gives 


rise to the false expectation that scientists can measure 





whether something 1S safe or not. They cannot, of course, 
because the methods of the physical and biological sciences 

can assess only the probabilities and consequences of events, 
not their value to people. Scientists are prepared principally 
to measure risks. 

Since the taking of both personal and societal risks is 
inherent in human activity, there can be no hope of reducing 
all risks to zero. Rather, as when steering any course, we 
must continually adjust our heading so as to enjoy the greatest 
benefit at the lowest risk and cost. 

Vital to any business function is an effective cost-control 
program - in safety, a program that allows for specific budgeting 
for injury cost and equally important, specific accountability 
for injuries. This method assumes that employee injury costs 
should be controlled just as any other production cost, since 
they increase operating overhead, as do the expenses for raw 
Material, parts, and labor [Miller, 1977]. 

This is not a cold, inhuman approach to safety. There 1s 
a direct correlation between cost and human suffering. An 
accident that causes a great deal of pain and suffering will 
Peso generate high cost and loss of productivity. Thus, 
elimination of high-cost accidents will not only save money 
but also make the workplace safer and minimize the possibility 
of accidents that generate suffering [Miller, 1977]. 

Hammer (1972) in his Handbook of System and Product Safety 
has suggested that injury or damage can result from four funda- 


mental causes or combinations thereof: 
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a. material failure 

b. human error 

c. adverse characteristics of a product 

d. unusual environmental conditions. 

Recently, personnel concerned with accident prevention 
have become more and more convinced that injury or damage from 
any of these causes can be prevented or lessened through good 
design and planning. 

According to Zeller (1970) the interest in accident preven- 
tion or reduction has resulted in great public airing of the 
problem as well as increased awareness of the need for greater 
understanding of the causes if effective remedial action is to 
be developed. 

There is, however, some confusion as to precisely what 
constitutes an accident. Review of accident statistics indi- 
cates vastly different criteria for accident reporting. For 
this reason, statistical comparisons and statistical analysis 
can be accepted only with reservation until there is assurance 
that the data sources are comparable. In the broadest defini- 
tion any unexpected event might be considered an accident; for 
practical purposes, however, prevention iS most applicable to 
those mishaps in which either damage or injury is sustained. 

From the standpoint of cause and prevention, however, 
there is often little difference between circumstances that 
lead to destruction and those that result in only minor or 


no damage. 
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Another category of mishap - the hazardous condition or 
near miss - might also serve to alert personnel to incipient 
accidents. 

It is axiomatic that effective prevention must have a 
focal point of application. This implies that the probable 
cause of future accidents can be predicted. This, in turn, 
implies that the causes of past accidents have been determined. 
In practice, the determination of the cause of an accident is 
no simple matter. It becomes increasingly apparent as any 
accidental occurrence is examined that there is seldom a 
Single, clear-cut cause; more often there are multiple causes, 
which may be immediate or remote. Typical of this confusion 
is the accident involving the drinking driver who, while driving 
at excessive speed, leaves the roadway and crashes into some 
fixed object. It is very easy to attribute the cause of this 
accident to excesSive speed, roadway conditions, fatigue, emo- 
Ponal Bnstability, or to the social mores of a group that not 
only condones but encourages drinking and driving. This is 
quite compatible with the problem society faces when a crime 
1s committed that, by careful analysis, can be laid directly 
at the doorstep of society itself. While this sociological 
evaluation of an accident or a crime may result in broad insight, 
it is not conducive to the practical determination of causation 
that can lead to relatively direct remedial action. For this 
reason, it is desirable to define cause so that all accidents 


can be evaluated within the same frame of reference [Lowrence, 


m7 6). 
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One such definition defines the primary cause of an acci- 
dent as the last act or event in a time Sequence that made 
the accident inevitable from that point. While this, too, is 
subject to interpretation, it narrows the possibilities to a 
great extent. This kind of definition implies first a primary 
cause and, secondarily, contributing causes, with the primary 
cause by implication being the most important or, at least, 
the most proximate factor. This approach has the advantage 
of having one cause for each accident, which makes statisti- 
cal manipulation simpler. 

By contrast, other approaches list all causes without 
attempting to asSign primacy to one, thus permitting the 
evaluation of all causes collectively without previously 
defined relative importance. 

Unfortunately, even after critical evaluation has led to 
a determination of accident causes, the assessed cause may be 
a statement of what occurred rather than why it occurred. 

In the ultimate analysis of course, accident prevention must 
be based on why rather than what. 

The most commonly designated cause of accidents is human 
error. In accidents where material failure is recognized, 1t 
is often quite possible to continue tearing down the equipment 
until the precise portion that failed is isolated and the 
cause of the failure whether it be corrosion, stress, faulty 
load conceptualization, or other factors, can be determined 
and redesign proposed. In cases of human error, however, the 


Static statement that a human being failed provides no guidance 
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to future improvement. The need to reduce human error to its 
basic constituents as a means of obtaining insight into the 
causes of these failures has resulted in various approaches 
to segmenting human behavior for analytical purposes. 

A more fruitful approach is to analyze human error in 
terms of a total man-machine system interaction in which a 
temporal continuum serves as the base line from which to 
evaluate the human contribution to the mishaps. 

The major expense in a typical safety program is accident 
prevention. However, the general approach is to treat the 
symptom and not the cause of the accident on the basic pre- 
mise that accidents are caused when employees create an unsafe 
act or condition. This superficial treatment of safety may 
arise from the fact that employers incorrectly and greatly 
underestimate the costs attributed to the industrial accidents 
and injury and also underestimate the role safety plays in the 
Overall organization. 

To put safety in its proper perspective, it must first 
be realized that safety and efficiency are products of each 
Other. That is, the safe establishment is efficient. With 
this in mind, safety then becomes a management problem and 
not just the concern of the foreman or the supervisor. 

There are five basic principles of a safety management 
program. TheSe are: 

a. Accidents are suggestive of failures in the manage- 
ment system. 

b. Certain circumstances are predictive of severity of 


accidents. 
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c. Safety should be managed like any other operational 
mie Llon. 

d. An effective safety program will provide establish- 
ment of responsibility and accountability. 

e. An effective safety program will define situations 
that allow accidents to happen. 

Now comes the problem of safety performance meaSurement. 
W. Tarrants (1977) discussed this problem as the problem that 
has existed since the very beginning of organized attempts to 
control accidents and their consequences. In its most ele- 
mentary form, measurement has been defined as "The process 
of assigning numerals to objects according to rules" [Stevens, 
1951]. When we apply this definition in the safety field, we 
are quickly confronted with problems concerning what "objects" 
to measure and what "rules" to follow. 

As we learn more about the accident phenomenon we change 
our traditional concepts of describing it. Since measurement 
is primarily a descriptive process, we are in danger of 
believing that the description is the real thing and forgetting 
the nature of the phenomenon we want to describe. We tend to 
latch onto a particular type of measure and use it constantly 
which often prevents us from searching for and applying new 
measures which better describe the situation. 

The progress and maturity of a science or technology are 
often judged by whatever success has been achieved in the use 
of measures. Measurement, perhaps more than any other single 


aspect, has been the principal stimulus of progress in all 
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professional fields. Measurement is the backbone of any 
scientific approach to problem definition and problem solu- 
tion. Without adequate measurement in the safety field we 
cannot describe the safety state of our operations or determine 
whether or not our safety programs are really accomplishing 
anything. Sound measurement is an absolute prerequisite for 
control and both are necessary for prediction. As Tarrants 
(1977) suggests, accident control and prediction, valid and 
reliable measures of safety performance are essential in 

@eaqer to: 

a. Locate and describe problem areas, 

b. Identify causal relationships, 

c. Make decisions concerning the optimum allocation of 

accident prevention resources, 

d. Evaluate the effectiveness of applied countermeasures, 

and 

e. Detect when the system is deteriorating toward 

Hmacceptabdle jimits of control. 

The existing measures of safety performance some of which 
will be examined does not permit us to achieve these objectives 
at an acceptable level of effectiveness. 

The purpose of this thesis research is to perform a 
literature survey of the various techniques by which safety 
program effectiveness is currently measured and to propose 
a methodology for the utilization of the recordable occupational 
injuries and illnesses data with an application based on the 


analysis of real data. 
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(oe osha lURE SURVEY 


As suggested earlier, a safety program, like any organi- 
zational program must be measured, thus its effectiveness may 
be evaluated and its contribution to overall efficiency will 
be evident. Managers will compare, justify and make future 
predictions on the overall loss prevention strategy. 

There are several methods in use of measuring safety 
performance effectiveness like frequency and severity rates, 
critical incident techniques, control charts, learning curves, 
safety sampling, Double Average Comparison Technique (DACOM), 
System Analysis Techniques etc. ; 


A discussion of these methodologies is: presented below. 


A. FREQUENCY AND SEVERITY RATES 

Frequency and severity as discussed by Simonds and 
Grimaldi (1963) are accepted standards by which a company 
can appraise its industrial injury record and set goals for 
achievement. Very roughly, these terms refer, respectively, 
to the relative frequency of occurrence of major injuries, 
on the one hand, and the total days lost, plus time charges 
for deaths and permanent impairments resulting from major 
Magit~tes, On the other. It is important to be able to com- 
pare the injury record of one dividision with that of another 
in the same company, or of the company for the current year 
with its performance in preceding years, or of one company 


with other concerns in the same industry. For these reasons 
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and to facilitate the holding of contests among companies to 
stimulate accident-prevention efforts, the American Standards 
Association initially had established precise bases for com- 
puting frequency and severity rates (216.1 Code). In their 
calculations of safety performance based on rates, Simonds and 
Grimaldi have taken into account only disabling injuries. A 
Single safety index developed by Western Electric was pre- 


sented by Gilmore (1970) that is: 


Cox 2,000, 000 


Sats = hoax wx P 
where: 
SSI = Single Safety Index 
P = Number of plant personnel 
D = Days in the period being measured 
ec = Charges as the total number of calendar days 


lost in excess of the first seven calendar 
days or 10 percent of 216.1 schedule (which- 
ever is greater) for both on-and off-the 
Ob Injures. 
New concepts have been added to the disabling injury fre- 
quency method in this formula, first, there is a dependence 
on the severity of the accepted injury. Second, off and on 
the job disabling injury have the same weight. Third, the 
count on days charged begins with the eighth day of disability. 
Fourth, the use of 10 percent of the severity schedule for 


days lost under the 216.1 code recognizes what some consider 


inequities within that schedule. 
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A test of a plant's performance by this index might 
serve to make managers more aware of the costs of manpower 


losses due to accidents. 


1. Frequency Rate 
The frequency rate is the number of disabling injuries 
as defined by the American Standard ASsociation per million 
man hours worked. In mathematical terms it can be expressed 


ass 


Frequency = Number of Disabling injuries ~ 


Number of manhours worked 
O00 ,000 


Sector ease of computation, 


Number of disabling injuries x 1,000,000 


Frequency = Number of man hours worked 


Example 1. A Shipyard concern employed an average of 
2700 workers during 1978. Working 40 hours a week for about 
50 weeks, each man put in about 2000 hours during the year. 
They experienced 65 lost-time injuries during the course of 
the period. 

MeO oa 000,000 . _ re ™ 
Frequency = 700 x D000 }»* iO sw pes million manhours 

A statement that the shipyard has a frequency rate of 12 

means that 12 disabling injuries occur per million man-hours 


worked. 
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famcalculating the number of disabling injuries, it should 
be noted that it is the number of disabling injuries and not 
the number of accidents that is intended for inclusion in the 
total. For example in a case of a catastrophic accident 
where 25 people were killed in an explosion, 25 disabling injuries 
would be included in the total number of disabling injuries for 
the unit's experience. 

It is generally felt that frequency rates based on a million 
or more man-hours are very Significant. Obviously, the smaller 
the sample, the less reliable is the rate as evidence of 
accident-prevention performance. Due purely to chance, the 
frequency rate of the shipyard in the above example might vary 
considerably from year to year. Nevertheless, the approximate 
yearly frequency rate would be a fairly good indication of how 
frequently activities got sufficiently out of control to 
result in serious injuries. 

A frequency rate well over 12 could probably be reduced. 

In appraising this frequency rate, however, one should see 
how it compares with typical frequency rates in other firms 
doing the same type of job. 

We know, as yet, nothing about how serious those 65 
injuries were. That leads to consideration of a measure 
that will be affected by the seriousness of the disabling 
injuries. 

The bureau of Labor Statistics uses a base of 100 full- 
time employees as opposed to the 1 million man-hours used by 


meieweamerican National Standards Institute (ANSI Standard 216.1). 
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It is assumed that 100 full-time employees would work 200,000 
hours per year (40 hours per week per worker, 50 weeks per 
year). Computed on this basis, the injury frequency rate 


for the shipyard mentioned would be: 


Spee U0 000 


Injury frequency rate (BLS) = -27o5-Oo6 


2.4 per 200,000 man-hours. 


2. Severity Rate 

The severity rate is the number of days charged for 
disabling injuries per million man-hours worked. The time 
charges include, first, the number of actual calendar days 
(including holidays or plant shutdowns) on which the injured 
person was rendered unable to work in temporary total disability 
cases. Neither the day of the injury nor the day the injured 
worker returns to work is counted in the lost working days. 

The method of computing severity as well as frequency 
rates are the Z16.1 - 1954 R. 1959 Publication of the American 
Standards Association (or American National Standards Insti- 
tute ANSI). In Table I specific time charges are available 
which have been established by the American National Standards 
Institute for use for all other lost-time cases (deaths, 
permanent toal, and permanent partial disabilities). 

In this group of deaths and permanent impairments actual 
time lost from work in a particular case is not considered. 


The standardized time charges alone are applied. 
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Table I 


The American Standard Scale of Time Charges 


Time Charges as 


Nature of Injury Number of Days Lost 


Death 6,000 days 
Permanent Total disability O00 
Loss of member or complete loss of use of: 
Arm above elbow 4,500 
Arm above wrist but not above elbow 3,600 
Hand above proximal joints of fingers, 
but not above wrist 5.71000 
Thumb at or below distal joint 500) 
Thumb above distal, but not above 
proximal joint 600 
Thumb metacarpal 900 
Other fingers: index Middle Ring Little 
Bone damage below distal joint 100 75 60 50 
At or above distal but not including 
meadle joint 200 150 120 100 
At or above middle but not above 
peoximal joint 400 300 240 200 
Metacarpal loss 600 500 450 400 
Leg above knee 4,500 
Leg at or below knee but above ankle 3.000 
Beet : 
At ankle 2,400 
Toes: 
Great toe at or below distal joint 150 
Great toe above distal but not above 
proximal joint 300 
Great toe meatarsal 600 
Any other toe: 
Distal phalange 515) 
Middle phalange (ee 
Proximal phalange 150 
Metatarsal 350 
One eye (loss of sight), whether or not 
there is sight in the other eye 1,800 
Both eyes (loss of sight), in one accident 6,000 


One ear (complete industrial loss of 
hearing), whether or not there is hearing 


in the other ear 600 
Both ears (complete industrial loss of 

hearing), in one accident 3,000 
Hernia (unrepaired) a0 


Note: If hernia 1S repaired, it is 
not counted as a permanent disability 
but rather asa temporary total disability 


Z2 





Table I (Cont'd) 


Finger tips: Loss of a finger tip without 
traumatic or surgical bone involvement 
is not give a standard charge but rather 
is treated like any temporary total 
@tsability. 


The American Standard Scale of Time Charges 


Geaken from Simonds, R.H., and Grimaldi, J.V. [1963], 
pq. 38) 
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For injuries involving more than one part of the body, 
the total may never exceed 6000 days. This was based on the 
life expectancy of the average worker times the number of 
working days per year. (The Bureau of Labor Statistics does 
Met include a fixed charge for a fatality.) 

With the Bureau of Labor Statistics method, only actual 
workdays lost are charged. The Bureau of Labor Statistics 
method requires time charges be included even if an employee 
is assigned another job; any change in occupation resulting 
from a work accident or illness iS recordable. Therefore, by 


meijsl 216.1 


total days charged x 1,000,000 


Disabling injury severity rate = employees hours of exposure 


Example 2. If in the previous example we had 20 disabling 
Mmigurles in the shipyard resulting in 800 days lost, the dis- 


abling severity rate would be: 


S0Ue sa, JUN, 000 
59,400,000 


Disabling injury Severity rate 


148 days per million man-hours 


The average severity per injury can also be determined. 


This can be done in either of two ways: 


Total days lost or charged 
Total number of disabling injuries 


Average days charged 


= eve 40 (Average seriousness of injuries 


0 





injury severity rate 


Average days charged = injury frequency rate 
148 _ ! 
Som a 40 (Average seriousness of 
a; injuries) 


Where injury frequency rate for the 20 disabling injuries in 
the shipyard is 


Poe, COO, 0008 — eee a 
—3-400,000 + 3./ per million man-hours 


In summary, both rates are needed in appraising safety 
performance, but the severity rate particularly should be 
examined over a several-year period. For comparison purposes 
moemercquency rate is best, but since severity is actually a 
combination of the frequency and relative seriousness of 
injuries, perhaps a low severity rate is the most satisfying 
long-run accomplishment. 

The evaluation of those rates is based on accident statis- 
tics, which, by their very nature, are collected after the 
[tere LO be statistically valid, accident data must be col- 
lected either over long periods of time as already discussed 
Or from a large number of similar activities. When they must 
be collected over a long period, by the time statistical validity 
has been established, operating conditions may have changed 
Pemenat the data no longer apply. 

Accident statistics provide valuable information to regula- 
tory agencies and insurance companies. Regulatory agencies 


may use such data to identify causative factors and whether 
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additional safety requirements are needed to eliminate them 
in future accidents. Insurance companies can use accident 
data in determining costs of premiums, which are based on 
accident and injury frequencies and severity rates. 

Unfortunately, even where accident and injury statistics 
can be useful, they are often incomplete, inaccurate, and 
therefore incorrect [Hammer, 1976]. 

Concluding the discussion about the frequency and severity 
rates as defined by the American National Standards Institute 
(ANSI), Standard Z16.1, as the number of disabling injuries 
Sustained per million man hours worked for the frequency rate, 
and as the number of days charged to disabling injuries per 
million man hours worked for the severity rate, neither accounts 
for the magnitude and duration of the effect created by a 
change in the safety program. 

Management therefore must wait until accidents occur before 
there can be a comparison to determine the effect a change 
has made in the safety program. This conclusion is supported 


Syebuty (1970). 


fect (CAL INCIDENT TECHNIQUE 

The simplest way to find out from employees if they are 
aware of any hazards in their work environment is to ask them. 
The Critical Incident Technique is a means to do this most 
effectively. The method is based on collecting information on 
hazards, near misses, and unsafe conditions and practices from 


Operationally experienced personnel. It can be used beneficially 
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to investigate man-machine operational relations and to use 

the information learned to improve equipment and operations. 
According to Hammer (1972) this technique consists of inter- 
Viewing personnel regarding involvements in accidents; or near 
accidents, difficulties, errors, and mistakes in operation; 

and conditions that could cause mishaps. The surveys generally 
request the persons interviewed to include their own experi- 
ances and also experiences of other personnel whom they have 
actually observed. The person is asked to describe all near 
misses or critical mishaps that he can recall. 

In effect the critical incident technique accomplishes 
the same result as an accident Mas pi gain Identification 
through personal involvement of a hazard that has or could 
result in injury or damage. When the witnesses who observed 
24 mishap or near miss, but were not participants, are added 
to those who were involved, an extremely large population is 
available from which information on possible accident cause 
can be derived. 

Even isolated incidents reported by the technique can be 
investigated to determine whether corrective action is necessary 
Or advantageous. However, when a large number of persons are 
interviewed regarding similar types of equipment or operations, 
Similarities begin to appear in reports of hazards and near 
misses. Where these indicate deficiencies, difficulties, or 
other inadequacies, they can be accepted as indicators of areas 


in which improvements are necessary. 
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Attempts have also been made to produce similar effective 
results in obtaining information through the use of question- 
naires to be filled in by selected personnel. This method 
has proved to be unsatisfactory for a number of reasons. One 
fundamental problem was the need for extreme care in selecting 
and phrasing the question. Too often, the person completing 
a questionnaire would give the questions interpretations 
neither considered nor intended by the person who prepared 
them. Any question should be avoided whose answer requires 
involved reasoning that is not immediately apparent to the 
reader. 

The critical incident technique procedure is described by 
Tarrands as carried out at one plant of the Westinghouse Com- 
pany. The steps are summarized by W. Hammer (1972) as follows: 

a. A group of employees with previous experience and 
involvement in manufacturing processes and equipment was 
selected. Each person included was listed according to various 
factors, in order to produce as wide a range of experience as 
possible. Representatives were selected randomly from each 
MactOr group. 

b. The participants were interviewed and informed of the 
Study and its objectives. They were given an opportunity to 
Withdraw from participation. 

c. At the end of the interview the participant was given 
a copy of the statement on the study and its objectives and 
a list of typical incidents gathered at other plants. This 


procedure was to stimulate the recall process. 
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d. Participants were asked to describe any incident(s) 
that they could recall, whether or not they had resulted in 
innury or property damage. They were asked whether they re- 
called the incident similar to those that had occurred at 
other plants, as described on the list they had been provided. 

e. Questioning was carried on until human errors or un- 
safe conditions in any recalled incident could be described. 

Twenty participants related 389 incidents of 117 differ- 
ent types. Over 50 percent more potential accident causes 
were found by this method than had been identified from acci- 
dent records. One participant estimated that almost 70 per- 
cent of the problems reported occurred every day, indicating 
an almost constant exposure to danger. According to Hammer 
(1972) the basis for the Critical Incident Technique is that 
it has been estimated that for every mishap there are at least 
400 near misses and that for every serious injury that occurs, 
there are approximately 600 no loss accidents (incidents) that 
should serve as a warning to say that given enough time, it 
will occur. Once a potential accident has been reported, 
the hazards are corrected so that a real accident will not 
occur. As these hazards are eliminated or reduced so should 
accident frequency and severity rates. 

The major deficiency of this method is that its effective- 
ness will be dependent upon all employees reporting those 
potential accidents (incidents) in which they are involved. 
Usually employees will be reluctant to do so. They are worried 


about their supervisors attitude, their own personal records 
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and/or spoiling the company's safety record. Thus data with 


some degree of bias are introduced. 


Se CONTROL CHARTS 

Peeetding tO Brown (1976) a control chart is a visual 
means by which an analyst judges whether a process is in con- 
trol or not. The measurements plotted on the chart are those 
of any random variable. Thus frequency and severity of acci- 
dents, as well as any other intermediate indicator of hazards, 
could be plotted. Judgements based upon these plots determine 
meeche process is in control with respect to the random variable 
under consideration. 

Pequre | shows the typical layout of a control chart. The 
units of the random variable are given on the vertical scale, 
indicating that the height of the plotted point represents the 
value of the random variable for the indicated time period. 

The time scale, given horizontally, shows when the value occurred. 

Although any one value can not be predicted, measurements 
of central tendency and spread define the expected concentra- 
tion and range of the variable. Thus, if the variable behaves 
in a nonrandom way, we can conclude that an outside influence 
is affecting the random variable. The most common way of iden- 
tifying when this occurs is through the use of an upper and 
a lower control limit. These are generally placed at equal 
distances above and below the mean line. 

The measured values as they are recorded in time are 
plotted as indicated in figure l. A point falling above or 


below the control limits, respectively, is indicative of an 
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Figure 1: Example Control Chart 
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out-of-control situation, and assignable causes are generally 
sought. There are other indications of out-of-control situa- 
tions, also. However, prior to discussing these, the means 
for obtaining the control limits should be examined. 

The procedures for setting control limits are essentially 
the same as those for setting the acceptance limits in a test 
of hypotheses. The first step involves the establishment of 
a eet of significance (a), that is the probability of con- 
cluding that the process is out of control when in fact it is 
in control. If methods of identifying causes are expensive 
and the variable is not critical, a low probability can be 
tolerated. However, if an early indication of lack of control 
is necessary, then a high probability of this error should be 
specified. 

Once the value of (a) is determined, the next question 
mivemves the definition of control. Quite often the state 
Memon CONtCrOl” occurs in One direction only. In sound- 
level readings, for example, rarely is the analyst concerned 
With the plant being too quiet. Here only an upper limit 
would be required, as it would in most cases of pollution 
measurements. 

Other monitoring of processes would require both an upper 
and a lower control limit. In either case the value of (a) 
chosen will represent the total area of probability in the 
Out~-of-control portion of the chart. The upper and lower 
control limits are obtained depending upon the random variable, 


meeoistribution, and the value of (a) chosen. 
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Brown (1976) has suggested in the following example that 
the frequency of accidents, above a given severity for a plan, 
has a normal distribution with a mean of 6 and a standard 
deviation of 1.5. Frequencies for the first 6 months have 
been 4, 7, 5, 12, 8 and 6. In his example he allowed for a 
meee probability of calling a point out of control when it is 
not. In this example a situation is said to be "out of con- 
trol" when the random variable falls above the upper limit. 
However, the analyst chooses to set up a lower limit to pro- 
vide possible evidence of a lowering of the accident frequency. 
Thus the 0.05 probability will be divided, 0.025 above the 


upper limit and 0.025 below the lower limit. The upper limit 





becomes: (using z = aas8 which "standardize" any normally 


distributed random variable) 


Meper Limit (U.L.) = X + Zy 925 §Fx? 
= 6 + 1.96(1.5) = 8.94 
where: 
- n x. 
x = )} Pose ; 
j=) 7” 

O = zs 

xX Ox 

lea = E([(x-u an 

Be E(X] 
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ana the lower limit also becomes: 


Lower Limit (L.L.) = x 25 925 Fx! 
SO eel Gl. Oo), “a” 3.06 
maencontrol chart 1S given in Figure 2. The fourth month 


was Obviously out of control, and assignable causes should be 
sought. Any subsequent monthly reading that falls out of 
Bonerol Should also prompt an investigation of the plant. In 
this example the assumption of normality should be tested 

Since it does not hold generally. Rather than charting indi- 
Vidual random variables, whose distributions may be unknown, 
often sample means are plotted. By the same procedure Accident- 
Severity Control charts may be obtained. 

Thus any random variable can be plotted on a control chart. 
Baewconsceruction of the chart 1s simply a matter of applying 
hypothesis testing on a continuous basis. The primary advan- 
tage is that continuous visual perception of the random varia- 
ble is maintained. 

This continuous picture enables the analyst to make judg- 
ments not otherwise discernible. This is not limited to the 
upper and lower control limits demonstrated above. Other 
factors that the analyst can use as indicators of abnormal 
Operational behavior include: 

a. Several points (four or more) in a row on one side of 
the mean line. The probability of four consecutive points on 


One side is approximately Jase Om, 0. 0625. 
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b. Identifiable cycles. Here two or three years of 
history may be required to identify a given month or other 
period of time when the operation acts in an irregular manner. 

c. Several points in a row, either monotonically increasing 
or decreasing away from the mean line. The probability of 
this type of trend is difficult to establish. However, since 
these points are all on one side of the mean line the probability 
Will be considerably less than OS. where n is the number of 
Beints exhibiting this characteristic. 

ieauallty control situations, 30 control limits are 
generally used, based on the l1-in-1,000 value of (a) under 
the normal-distribution assumption. The 2c (accidents) and 
lo lines may also be set up, however, to help the analyst 
identify other out-of-control indicators. For example, two 
points in a row outside of 20 limits would have an approxi- 
mate probability of i, CAENS = 0.000625, which is about the 
Same as the probability of one point outside 30 limits, assuming 
Sormmality. Although control charts for safety applications 
Should not be restricted to the a = 0.001 value, the concept 
of intermediate lines to identify irregularities is a good 
one. 

Control charts are used in some states for monitoring 
traffic accidents. Overall accident frequencies, as well as 
finer breakdowns by severity classifications may be plotted. 

However this technique also does not account for the 
Magnitude and duration of the effect created by a change in 


the safety program. Therefore we must wait until accidents 
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occur before there can be a comparison to determine the 


effect a change has made in the safety program [Duty, 1970]. 


D. LEARNING CURVE 

The learning curve method has been used extensively in 
oroduction cost analysis. It was first developed by Dr. T.P. 
Nxright for cost analysis of airplane production. He observed 
that the cost of producing each of a series of orders for 
airplanes of a particular model diminished as the orders were 
Filled [Gilmore, 1970]. 

jeeperimental application of the learning curve has shown 
the effect of learning on the repetitive assemblies of equip- 
nent, the effect of incentives on productivity, the effect of 
Llow- and high-volume production, and other productivity sSitua- 
fFions. A logical use of this method would be to determine 
the obsolescence of manufacturing processes or the point at 
which cost improvement ceases unless a significant change is 
nade in the process or that is replaced with a more modern, 
low-cost process. 

In the study of the American petroleum industry an accident- 
2xperlence learning curve model was developed, which closely 
corresponds to the conventional industrial learning curves. 

As discussed by Gilmore (1970) we see that safe perform- 
ance of work is also a learning process. Experience should 
teach us to do a better job of operating a massive crane to 
lift and place steel, or driving a truck etc. But people 


don't always learn. The job becomes routine and boring, 
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corners are cut, establishes procedures are violated, and 
accidents occur. Good safety programs appear so effective 
that change Seems unnecessary, but even the effective ones 
can lose their punch. During orientation, workers are informed 
of the safety rules, but these are easily forgotten. Safety 
performance should improve as experience increases, programs 
improve in quality, job procedures are refined, and effort 
is applied. It seems logical that if production costs decrease 
as we learn how to produce more efficiently, safety perform- 
ance should improve as we learn how to perform work more 
Safely. Neither just happens; it takes a concernted effort 
on a continuous basis to make it so. The learning curve is 
just a method to chart the progress of that effort. 

According to Dr. Wright the mathematical model for the 


learning curve is 


Z are) 
esc fal) 
where 
tery 
Y; = The cost of the 1 an ©; 
a = The cost of the first unit; therefore y = a, 
il = The production count beginning with the first 
Lildeltoy. 
b = The measure of the rate of reduction. 


For the learning in safety performance if we represent 


the serious innury frequency by (SIF) and the total injury 
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frequency by (TIF) and using SIF as the measurement unit 


equation (1) becomes 


SLES pS) uae LP a) 
where: 
SIF, = the Serious Injury Frequency at time t. 
SIF, = the Serious Injury Frequency at the 
beginning of time. 
t = the accumulated man-hours since beginning; 


it can also be shown as million man-hours 
or dated years on graph. 


the measure of the rate of reduction. 


oO 
ll 


As in the original learning equation (1), this model has 
the characteristic of describing constant percentage reduc- 
tions. Each time (man-hour) increase of a constant percentage 
sees an accompanying injury frequency decrease of a constant 
percentage. If to and t, are two points in the exposure history 


Of a work group and ts ? ty then 





The original safety equation (2) becomes 
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and by the log transformation we have 


DeLOg ct log SIP, = log SIF, 


Or 


log SIF, = log SIF. ee) eG) Gants 
Which is the equation of a straight line with slope -b. The 


log transformation of the equation (3) is 


Noqeolt as lOg Sif 


y, l 


“Tog t, > tog ty; = -b = the slope (4) 


The learning curve can be constructed on a log-log graph 
paper on which SIF is plotted on the vertical ordinate and 
the accumulated man-hours on the horizontal ordinate. If the 
improvement in performance was steady, SIF values plotted 
would form a straight line of negative slope. This slope is 
the rate of learning or rate of improvement. These rates 
are expressed aS a percentage of the no-improvement level of 
100 percent. In other words, a learning rate of 80 percent 
is an improvement of 20 percent and has a slope equivalent 
to a reduction of 20 percent from the initial value or a new 
value of 80 percent of the initial value. This is shown on 
figure 3 where the 100 percent straight line is the no-improve- 


ment line. Those with the negative slope straight lines 
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Figure 3: The Learning Rate Curve 


(Taken from Gilmore, C. PiowO ime. 93) 
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show the corresponding improvements of 10, 20, 30 and 40 
percent respectively and those with the positive slope 
straight line show the corresponding negative improvement 
of 20, 40 and 60 percent respectively. 

The rate of progress of the learning us usually described 
as that reduction of injury frequency (or whatever) which 


occurs when the time quantity is doubled. This then is equal 


= t 
> a quantity C 2 expressed as a percentage, where zs = C= 2 
i 
mnen 
c? = LR (5) 
where: 
ie 
C eo the time ordinate ratio 
ip 
-b = the slope of the plotted curve 
LR = the learning rate expressed as a decimal. 


Making a log transformation and substituting the value 


fe = 2 


-b log 2 = log LR (6) 


Meeesubstituting (6) into (4) we obtain the equation 


Glogs Zy (Log Sif 
CLOG. -& 


- log SIF,) 


E (7) 


log LR = = es ey) 
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This equation permits, by transposition, the calculation 
of reasonable expectations of injury frequency at some future 
time so that long and short-range goals can be set and perform- 
ance charted against those goals as shown in figure 4. The 
equation for predicting or setting a goal in the future comes 


SyesOlving (7) for log SIF. and 


(leq) a log t, - log t,) 


ee +7 + log SIF, (8) 


Let us take, for example, a plant which accumulates two 
million man-hours each year. On January 1, 1978, the plant 
had accumulated 8 million man-hours and had an average SIF of 
30 serious injuries per million man-hours for the last quar- 
ter of 1977. Point data for one month are quite variable, so 
at least three months of accident data are required. 

By January 1, 1979, 2 million man-hours more have been 
meeumulated, bringing the total to 10 million man-hours since 
Operation began. SIF for the last quarter of 1978 was 27. 
What has been the learning performance rate? 


Using equation (7) 


—.. _ Grog 2) (log SIF, - log SIF.) _ (leg 2) (leg 27 - 10g 30) 
2 (og t, — log t,) ——Tog 10 - log 8 


BePOPecOlce mGniel3e — 1.477) ~ 
7 (1.00000 - 0.90309) 0.14214 
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and 


LR = Learning or performance rate = 0.721 or 72%. 


Assuming the goal for improvement was to continue through 
the coming year at the same rate, what is the goal for SIF at 
the end of 1979? Using the relationship (8) and assuming that 
two million man-hours will be worked by the same personnel 


during the coming year, we have 


log LR(log t, 7 oc t,) 

log SIF. = eam + log SIF, 
ieamoey2t(ltog 12 - log 10) = ee 25 

log 2 
-.14206(1.07918 - 1) A 
EEEOESONOZ== =e 
= 1.39399 SIF. = 24.77. 
The same result (SIF. = 24.77) would have been obtained 
iba SIF, oe s0 at ty of 8 million man-hours had been used. IS 


this a good learning rate, or iS improvement too slow? Any 
improvement is in the right direction. Studies generally 
agree that there is no universal curve that fits all learning. 
However, the learning curve provides the ability to recognize 
the existence or absence of progress and the desirability of 
measuring that progress. Improvement is important. When the 


learning curve flattens (100 percent) or goes up (greater than 
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mao percent), that plant or group has gquit learning (improving) 
as already discussed and corrective action is in order. 

Sociologists say that learning at the 80 to 90 percent 
rate 1S guite acceptable for a mix of men and machines. So 
a very reasonable goal for a safety performance improvement 
would be 10 percent per year. 

A plot can be prepared to show this goal by using log-log 
graph paper and plotting SIF on the vertical ordinate and man- 
hours exposure along the horizontal. As time progresses, the 
actual values of SIF can be plotted to show their relation to 
the goal line. Due to the wide variations in monthly SIF 
values, the plotted points may not show any particular relation- 
ship to the goal line. 

Thus the important aspect of this method is that it allows 
management to set goals for coming periods. But once again 
it does not account for the magnitude and duration of the 
effect created by a change in the safety program and we must 
wait until accidents occur before there can be a comparison 
to determine the effect a change has made in the safety program 


Beaty, 1970). 


E. SAFETY SAMPLING 

Another technique for the evaluation of safety performance 
is the safety sampling technique which according to Petersen 
(1971) is a method of systematically observing workers to 
determine what kind of unsafe acts are being involved as well 


as the frequency of occurrence of unsafe conditions. Using 
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those results we may come up with a safety performance 
figure. 

There are some Similarities between safety sampling and the 
critical incident technique. Duty (1970) has pointed out that 
safety sampling 1S Similar to critical incident recall in that 
unsafe acts or conditions that might cause accidents are of 
interest. The difference is that this sampling is not directly 
coupled to the workers own initiative to report these conditions. 
Once the number of exposures is estimated through the sampling 
procedure, then is compared to previous figures and the number 
of exposures is studied. Fewer exposures means more effective 
safety program. 

Gilmore (1970) presents the following examples concerning 
the use of safety sampling technique. Du Pont safety control 
program was examined. The number of unsafe acts and unsafe 
conditions found in a random selected sample of a work area, 
indicates a specific measure of the safety level in that area. 
This sample was made in each work area on a once-per-week 
Schedule by a team of supervisors. The inspections were limited 
to 15 minutes. Inspection's time and team were randomly selected. 
Then a plot of the inspection results was performed to help in 
the interpretations. To ensure uniformity and competence of 
the samples, a training program for the supervisors had been 
established. The results were encouraging. It was found that 
an improvement in safety had occurred. This was a successful 
approach, in its primary purpose, of estimating the value of 


the safety level of individual sections as well as teams of 
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employees, within their sections and plants. The randomness 
of the inspection time had a positive effect since the plant 
was on a constant alert basis. Other companies such as 
Monsanto Company, Chrysler Corporation etc., have used this 
technique successfully. One procedure for safety sampling 
eccording to Petersen (1970) is: 

1. Preparation of a Code: This is an element code list 
of unsafe practices that is developed from the accident record 
of each plant. Additional possible causes are listed. This 
code is placed on an observation form (see figure 5). 

2. Sampling: The inspector will identify the department 
and the responsible supervisor. He then observes every employee, 
every activity of that area and records a safe or unsafe obser- 
vation of the employee. Each employee is observed and 1s 
marked as safe or as unsafe if observed as performing safely 
or unsafely. Any unsafe practice is marked on the element code 
list. The accuracy required as well as the results of a pre- 
liminary survey will establish the number of observations 
Within the sample. 

3. Validation of the sample: From the preliminary survey 


suppose: 


P The percentage of unsafe observations 
Y = Desired accuracy. 


Then using the formula as suggested by Peterson (1970) 


4(1 - p) 
ey (D)) 
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Figure 5: Safety Sampling Worksheet 


(Taken from Petersen, D. [1971], pg. 76) 
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We may obtain the minimum number of observations (N) required 
hon, the validity of our results. 

This method, as well as the others discussed so far does 
not account for the magnitude or the duration of the effect 


created by the safety program [Duty, 1970]. 


F. DOUBLE AVERAGE COMPARISON TECHNIQUE 

Another method of measuring safety performance is the 
Double Average Comparison Technique method (DACOM) initially 
developed by Wilson (1970) of Sperry Flight systems to measure 
safety performance. 

This method as briefly described below is based upon collec- 
tion of number of exposures to potential accidents in various 
departments (or areas) of a company and compared with the num- 
ber of man-hours worked during @ certain period of time. 

An achievement index is constructed based on reduction in 
number of exposures to potential accidents per million man- 
hours worked which gives an indication to the safety director 
if there is any improvement or not in various departments (or 
areas). 

An interesting aspect of this method is that it may be 
utilized either with data collected by critical incident 
technique (or sampling method) or by the use of real accident 
data thus permitting management to compare departments in some 
uniform way and to have an indication of the effectiveness of 
a safety program before occurrence of accidents. 

There iS no indication whether this method may be econo- 


mically utilized. The assumptions that should hold for the 
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method to be valid are: 

1. A safety program exists, 

2. This program had not changed over the period that 

this method is applied. 

The following procedure is suggested by Duty (1970) for 
utilization of the DACOM method: 

1. Collection of data for number of exposures to poten- 
tial accidents in various locations of the company, using 
either the critical incident technique or better, by the 
safety sampling method. 

2. According to the methodology described in the sampling 
technigue section a code is prepared, sampling is conducted 
and calculation of the required number (N) of observations is 
determined. 

3. The data of man hours worked in each area during each 
time period is obtained. 

4. Achievement Index (AI) is defined as the reduction in 
number of exposures to potential accidents per million man- 
hours worked. This index is calculated for each period worked 
and is based upon short range improvement (SRI) and long 
range improvement (LRI). Assuming that the number of exposures 
to unsafe acts or conditions is a random variable normally 
distributed (for large number of exposures where the Central 
Limit Theorem holds). 

5. The achievement index is then calculated for each 


group or area where data were collected. 
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A comparison between individual groups or between areas 
is feasible based on these achievement indices. This calcula- 
tion of the (AI) is accomplished by AI = a(SRI); + b(LRI) ; 
where AI is the Achievement Index for the ‘ae period with a 
and b the weighting constants based on the subjective management 
feeling for the importance of the Short and Long Range Improve- 
ments anda+t+b=1(a= b= .5 is an indication that the same 
importance is given to the short as well as to the long range 
improvements). 


6. Calculations of the SRI and LRI necessary for the 


calculation of the AI is done by: 


eit ant 
(SRI); ~ G2 
al 
where: 
(SRI). = Short range improvement of the group of 
al . -th : 
workers for the 1 period. 
mete’ ; 
xX: = Current performance for the 1 period 
i ; 
which is the number of exposures per 
million man-hours worked. 
Hs = Historical mean performance of the group 
through the it" period, and 
oe. = Standard deviation of the group through 
a -th : 
the 1 period. 
For i= 1 that is the first period after the new program 


was initiated, the current performance (X,) will equal the 


Mean performance (Hi; ) and oa QO since 


Dic 





Also 


where: 


where: 


oe 
OF = 
1 
(LRI) 
(LRI), = 
Us = 
O = 
eal 
G = 
Go are 
Hi 
G zs 
e. = 
a0 





Long Range Improvement for the larger 
group for the it" group. 


mean performance of the smaller group and 


the unbiased estimator of the standard 
deviation for the larger group. 


The group mean of the larger group, 


based on the total number of exposures 

to unsafe acts or conditions observed 
during each period for the entire company 
and 


lA 
Il 39 
Q 


Current performance for the tae period 
which is the number of exposures per 
million man-hours worked in the entire 
company, 


ae 








N = number of periods, and 
=, 2 
fe} = eae N- 
Me. a 
hi 
7. Interpretation and utilization of the Achievement 


Index as follows: 

The smaller the achievement index the better, as a 
small number is indicative of a small number of exposures 
experienced by the group for which the AI was calculated. 

A negative AI is an indication that the group for which that 
AI was calculated did not exceed its mean, whereas the rest 
of the company experienced some exposures. 

A regresSion line also may be formed to fit the AI of 


the previous years and the current one having the form: 


a + bx 


a 
I 


where: 


y = The predicted value of achievement based on 
the data used, 


x = The period number, 
a = The intercept of the regression line = y - bx, 
b = The slope of the regression line 
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where: 


x = The aoe period number, 
x = Mean of all periods, 
= ; ; etl 
ee = Achievement index for the i period, and 


The mean achievement index for the overall 
periods. 


<I 
i 


Positive slope or more positive than the previous period 
can be interpreted as a rising tendency to more exposures. 
Negative slope or more negative might indicate a falling 


tendency. 


Peo rolEMS ANALYSIS 

In their article "The Economics of Safety ... A Review 
of the Literature and Perspective", I.R. Canada and M.A. 
mvouwo (1977) adopt the definition and description of systems 
analysis as given by E.G. Triner (1968) as follows: 

Systems analysis is an inquiry to aid a 
decision maker to choose a course of action 
by systematically investigating his proper 
objectives; comparing quantitatively, where 
possible, the cost, effectiveness and risks 
associated with the alternative policies or 
strategies for achieving them, and formulating 
additional alternatives if those examined are 
found wanting. 

Systems analysis is not only the comparison of alternative 
means of achieving a deSired result but, more importantly, 
it is the vehicle for focusing attention upon the basic 
requirement itself. The means are complicated and are made 


up of a number of interrelated items. In systems analysis, 


mene analysts, by varying the inputs, can assess the effects 
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meom both costs and output. Given a certain resource, the 
best combination of inputs may be determined to maximize 
Mmeput. Or, from a different point of view ... given the 
desired output, it can be determined how this output may be 
obtained at a minimum cost. 

Safety analysts recognizing the needs for quantification 
developed several cost and performance models for analyzing 
the economics of safety problems. Roland (1975) has suggested 
a measure of safety performance which incorporates in a 
Single parameter the essentials of that performance, that 1s 
the probability of the mishap and its severity. According 
to Roland (1975) when one first attempts to establish a deci- 
Sion methodology for safety analysis, the multidimensional 
nature of the criteria 1S immediately apparent. The tradi- 
tional criterion of quantity of mishaps quickly breaks down 
when exposure variation iS considered. Combining exposure 
with quantity of mishaps results ina rate. This rate is 
based on historical evidence and the extrapolation of this 
rate to future periods of time as a measure of satisfactory 
performance, can be accepted only under two limitations: 

1. That the historical performance was typical or aver- 
age. 

2. That the system which generated the historical rate 
Will not be substantially altered in the future period. 

The matter of the level of historical performance may be 
Satistactorily resolved if there are multiple samples of 


Bie rate exhibiting stability. 


56 





Meeetne Variability of historical rate a suitable function 


me the chi-square distribution of the form 


Kr 
A S$ opi 2F + 2 
where: 
X = mishap rate 
a = risk 
F = number of mishaps (historical) 
T = historical exposure, 


is suggested by Roland (1975). 

This function of the chi-square distribution will establish 
MeeenserVative bound for a future criterion. Also this func- 
tion assumes that the mishap rate varies as the chi-square 
distribution. Such a rate, usually single bounded, projected 
into future periods, can provide a measure of future perform- 
ance given that no substantive alterations are made in the 
system. 

Assuming an estimate of future exposure, the Binomial or 
Poisson distributions will determine the probability of future 


Quantity of event occurrences. 


eis 2 


Pr(F=K) = ra 


where 
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k = number of mishaps 


ct 
if 


future system exposure 


The problem which arises from another dimension of the 
performance analysis, the severity of the mishap, given the 
probability of a future mishap and its value, the expected 
value may be formed as 


co 


E(C)K = f Pxr(K)C(K) 


=— 0O 


where C = Cost 


Meeeain DrObability functions will not allow this integral to 

be convergent. Such a case may be extremely costly for the 

user of such a system. Expected costs can be predicted in 

these cases by taking average values. It is frequently 

easier to perform a summation than to integrate the functions. 

Such a summation is given by 
K 


) Pr (n)C(n) 
n=1 


ac) K 


As another method of measuring safety effectiveness may 
be considered the method used by Brown (1976) who developed 


Mereeauit tree and cost/benefit analysis for choosing optimal 
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safety alternatives. J.R. Canada and M.A. Ayoub (1977) 
summarize Brown's work as follows. 

Brown shows how negative utility amounts can be assigned 
to all possible head events and the relevant probabilities 
multiplied by the negative utilities. The results, which 
are expected negative utility amounts, are called "measures 
Meer eticality”"™ by Brown (1976). 

Reductions in negative expected utility or criticality 
are considered to be quantitative expressions of benefits or 
effectiveness, and these are then related to costs to find the 
optimal combination of safety alternatives for the decision 
maker's cost-benefit trade-off function. 

Using Brown's (1976) methodology the safety manager should 
first utilize the fault-tree analysis technique as a logical 
approach to identify the areas in a system that are most criti- 
cal to safe operation. 

Having developed the fault tree analysis the safety manager 
has an insight of the problem but for further quantification 
a quantitative analysis has to be accomplished so that effec- 
tively allocated the safety budget which is an upper bound 
for the actual decision to be taken. 

Generally the best investments are those with the lowest 
cost/benefit figures, and these should be made first. Those 
figures may be interpreted as safety performance figures and 
when viewed in this perspective it becomes a powerful tool for 
improving the quality of safety investments. 


7 
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Next the fault tree methodology will be examined since 
it is the basis for discussing Brown's approach to cost/benefit 
analysis. Following this discussion an application on cost/ 
benefit analysis using fault tree analysis will be performed. 
1. Fault Tree Analysis 

Fault Tree Analysis, (FTA), was developed mainly by 
engineers who studied engineering systems in great detail, 
with little or no contribution by mathematicians. A possible 
memplanation given by R.E. Barlow (1975); J.B. Fussell (1975) 
eee. Singpurwalla (1975) is the fact that the construction 
of the fault tree, a basic step in fault tree analysis, requires 
an intimate knowledge of the manner in which a system is de- 
Signed and operated. The mathematician's lack of familiarity 
with the operation of systems, and perhaps their preoccupation 
with mathematically well defined problems, has deterred their 
interest in fault tree analysis. 

Peeenaing £O R.—. Barlow (1975) and H.E. Lambert (1975), 
FTA is one of the principle methods of systems safety analysis. 
FTA evolved in the aerospace industry in the early 1960's. It 
was the result of a contract between the Air Force Ballistics 
systems division and Bell Telephone Laboratories for the study 
of inadvertant launch in the Minuteman ICBM [Delong, 1970]. 
After initial work at Bell Telephone Laboratories, development 
of fault tree continued at the Boeing Company, where scien- 
tists devoted much effort to develop its procedures further 
and became its foremost proponents. 

Rodgers (1971) has referred to the following six 


steps that were used in applying the technique to the 
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Minuteman Program. 

1. Define the undesired event 

2. Acquire complete understanding of the system. 

3. Construct the logic diagram (Fault tree) 

4, Collect quantitative data 

5. Evaluate fault tree probability 

6. Analyze computer results. 
FTA is a detailed deductive analysis that usually requires 
considerable system information. It can be a valuable design 
tool. It can identify potential accidents in a system design 
and can help eliminate costly design changes and retrofits. 
fre Can also be a diagnostic tool. It can predict the most 
likely causes of system failure in the event of a system 
breakdown. 

Undesired events requiring FTA are identified either 
By inductive analysis, such as a preliminary hazard analysis, 
Or by intuition. These events are usually undesired system 
States that can occur as a result of subsystem functional 
faults. These events can be broad, all-encompassing events, 
such as "Release of Radioactivity from a Nuclear Power Plant" 
or “Inadvertent Launch of an ICBM Missile", or they can be 
Specific events, such as "Failure to Insert Control Rods" 
or "Energizing Power Available on Ordnance Ignition Line". 
The goal of fault tree construction is to model the 

system conditions that can result in the undesired event. 
Before the construction of a fault tree can proceed, the 


analyst must acquire a thorough understanding of the system. 
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In fact, a system description should be part of the analysis 
documentation. The analyst must caréfully define the undesired 
event under consideration, called the 'Top or Head event'. 

Practical considerations require that he scope the 
analysis, setting partial and temporal bounds on the system. 

To make his analysis understandable to others, the analyst 
should clearly show all the assumptions made in the construc- 
tion of the fault tree and the system description used. 

Event Description: A fault tree is a model that 
graphically and logically represents the various combinations 
of possible events, both fault and normal, occurring in a 
svstem that leads to the top event. The term, event, denotes 
a dynamic change of state that occurs to a system element. 
System elements include hardware, software, human and environ- 
mental factors. 

Event Symbols: The symbols shown in figure 6 represent 
Specific types of fault and normal events in FTA. The rectangle 
defines an event that is the output of a logic gate and 1s 
Mendent on the type of logic gate and the inputs to the 
gate. 

The circle defines a basic inherent failure of a system 
element when operated within its design specifications. It 
is therefore a primary failure, and is also referred to as a 
genetic failure. The diamond represents a failure other than 
a primary failure that is purposely not developed further. 

The switch event represents an event that 1s expected to occur 


Or to never occur because of design and normal conditions, 


Such aS a phase change in a system. 








as. 


Fault Event Basic Event 
Undeveloped Event Switch Event 
Transfer IN Transfer OUT Conger onal. Tnhput 


Figure 6: Event Symbols 


(akenescom BEOwn, D.B. [1976], pg. 158 
anGmeeeaers, Wer. [1971], pg. 41) 
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Logic Gates: The fundamental logic gates for fault 
tree construction are the OR and the AND gates. The OR gate 
describes a situation where the output event will exist if: 
me, Or more of the input events exist. 

The AND gate describes the logical operation that 
requires the coexistence of all input events to produce the 
Output event. Another gate used in the FTA is the inhibit 
gate. This gate permits applying a condition or restriction 
to the sequence. The input and condition or restriction must 
be satisfied for an output to be generated. The symbols for 
the logic gates are shown in figure 7. 

Construction Methodology: The fault tree is so struc- 
tured that the sequences of events that lead to the undesired 
event are shown below the top event and are logically related 
to the undesired event by logical gates. The input events to 
each logic gate that are also outputs of other logic gates at 
a lower level are shown as rectangies. These events are 
developed further until the sequences of events lead to basic 
causes of interest, called "basic events". The basic events 
appear as circles and diamonds on the bottom of the fault tree 
and represent the limit of resolution of the fault tree. 

The structuring process used to develop fault flows 
in fault trees when a system is examined on a functional 
basis is presented in figure 8. At this level, schematics, 
piping diagrams, processes flow sheets, etc., are examined for 


cause and effect types of relationships to determine the 
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PigM@cm, seo ymools For Logic Gates 


(aceneomemenoagers, W.P. [1971], pg. 40) 
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“The output of an AND gate occurs [Secondary 
only if all the inputs exist. \failures 
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“Qut-of-tolerance failure of a system element — 
failure due to excessive operational or environmental 
Siress. 
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dan inhibit gate is a special case of the 
AND gate. The oval indicates a conditional event 


Figure 8: Levels Of Fault Tree Development 


a-ewerrcomibarlow, B.b. and Lambert, H.E. [1975], pg. 16) 





maosystem and component fault states that can contribute to 
the occurrence of the undesired event. 

EEiforts have been directed toward automating fault 
tree construction for computer implementation [Fussell, 1972]; 
[Powers et al, 1975]. 

Purpose and Evaluation of the Fault Tree: The fault 
tree once constructed, serves as an aid in determining the 
possible causes of an accident. When properly used, the 
fault tree often leads to discovery of failure combinations 
which otherwise might not have been recognized as causes of 
the event under analysis. The fault tree can be used as a 
Visual tool in communicating and supporting decisions based 
on the analysis, such as determining the adequacy of system 
design. The fault tree provides a convenient and efficient 
format helpful for either quantitative or qualitative evalua- 
ron Of an event, such as determination of the probability of 
the occurrence of a top event. 

In the fault tree and Cost/Benefit analysis as the 
major goal of the fault tree may be considered as the calcula- 
tion of the probability of occurrence of the top event. 

imme mcasces the construction Of an initial fault 
tree may be reduced to a simplified one. There are basically 
two techniques for simplification of the boolean expression 
®t a fault tree. That is either utilizing the Veitch diagrams 
Or analytically utilizing the Boolean algebra identities. 
Appendix (A) gives these identities the familiarity of which 


increase the ability of manipulating Boolean equations. 
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According to Brown (1976) the purpose of developing 
a fault tree and quantifying it it to effectively allocate 
the safety budget. To do this, the various alternative safety 
investments are considered in light of their effect upon the 
fault tree and the resulting head event. A measure of cost/ 
benefit 1s then determined for use in decision making. Before 
completing the presentation of Brown's methodology some 
terminology as given by Brown (1976) will be introduced. 

Seis.) COfemtcecentned as the dollar outlay to pay for 
the incorporation of a device, method, procedure and so on 
(henceforth called a countermeasure) into the industrial sys- 
tem for a given unit period of exposure. Thus the cost of 
devices that must be periodically recharged and/or replaced 
is based on average costs for a given unit (e.g., a 1,000,000 
man-hour exposure period). Permanent fixtures, such as machine 
guards, can be prorated on the basis of the life of the machine. 
The cost of educational programs can be prorated, based upon 
their frequency. All countermeasures must, for comparison 
pruposes, have a common denominator. 

Benefit. Benefit is the negative utility reduction. 
Measure of benefit is the expected negative utility. There is 
a negative utility (or cost in terms of dollars and personal 
well-being) associated with accidents. This negative utility 
depends upon the severity of the accident. 

The expected negative utility of the head event if 


it occurs can now be calculated by the following: 
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Haile O 
where: 

P. = the probability of occurrence of the jth 
severity class given that the head event 
SeGcurs, 

N = the number of severity classes, 

u, = the negative utility associated with the 
ith severity class. 


An alternative method for calculating E would be more 
appropriate if the values of negative utility from a large 
number of past occurrences of the head event were measured 
directly. Thus the expected negative utility associated with 
the head event would be obtained from the arithmetic mean of 


these measurements: 


Both equations are equivalent under the conditions 
that there are n severity classes (N=n) and that the proba- 
bility of each severity class is equivalent (P. Se aaa This 


Occurs when each accident is considered as a unique situation. 


Cost/Benefit: This term is a vague term used in 
G@eéscribing a variety of applications. Here it is defined to 


be the dollars spent per negative utility reduction. 
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Absolute measure of "Criticality": Associated with 


the head event is defined as 


Cc = P 5 
where: 
P = The head event probability of occurrence 
(in occurrence/mmh). (The technique for 


obtaining P will be discussed.) 


E = The expected negative utility (in dollars/ 
occurrence or workday/occurrence etc.). Thus 
the absolute criticality associated with 
the head event it takes into consideration 
both the frequency and the severity. 

Determination of head-event Probabilities: The value 
of P can be obtained assuming that a proper unit of time or 
production has been determined to adequately define one trial. 


Following directly the concepts of relative frequency and 


probability one way of determining P is 


Pp = a 
n 
u 
where: 
rn = the number of occurrences of the head event 
is a trials given by the chosen time or 
DEOGWICELON tlme. 
Another way of determining P is by using the fault 
tree end branch probabilities. This is necessary 1f the effect 


Be alternative countermeasures is to be determined. 
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The probabilities of the branch events may be obtained 
as follows: 

In the OR situation, any of the events will cause the 
subsequent event to occur and, therefore, assuming indepen- 
dence, the probability of occurrence of the subsequent event 


is given by 


where: 


the probability of the jie causal event, and 


iQ 
JH. 
II 


= 
II 


the number of parallel branches. 


In the AND situation, all the events must occur for 
the subsequent event to occur and, therefore, assuming inde- 
pendence, the probability of occurrence of the subsequent 


event 1S given by 


Through a reiterative process the probability of the 
head event can be determined from a knowledge of the proba- 
Baeities of the branch events. This is the value of P that 


is used in determing the "criticality" associated with the 
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head event (or absolute expected negative utility). A system 
Meaditication will produce a change in this value of the 
expected negative utility thus providing a measure of benefit 
which actually is a measure of safety performance. 

Brown (1976) gives various examples to demonstrate the 
entire procedure. Here an example will be presented as a 
problem that has been formulated by Brown (1976) in his book 
Systems Analysis and Design for Safety. For the solution of 
this problem, Brown's methodology was followed as already 
described. 

2. Example 

Tt is desired to perform a cost/benefit analysis uti- 
lizing fault-tree analysis. The analysis will be performed 
on a Stairway where the following accident data are assumed 
to be known, for a five years period. Slippery surfaces 
caused three accidents, inadequate railings caused five acci- 
Gents, inattention caused two accidents, and obstacles on the 
Steps caused one accident. If the negative utility for each 
accident was an average cost of 200 dollars and if 1000 dollars 
are to be spent for improving the safety of the stairway 
according to the*following alternatives, each costs 500 dollars. 

Alternative one. Install new surfaces, this will 
reduce the accidents caused by slippery surfaces by 70%. 

Alternative two. Install new railings, this will 
reduce the accidents caused by inadeuate railings by 508%. 

Alternative three. Install warning signs and perform 


educational programs, by this alternative a reduction of 
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20% to the obstacle and railing-related accidents is 
expected. 

Then perform the following: 

a. Construct a fault tree diagram for this example. 

b. Based on an evaluation of the alternatives the 
best allocation of the 1000 dollars should be determined. 

c. It is to be determined whether an alternative 
investment of 500 dollars in another area that would yield 
a cost/benefit of 50.00 be justified? (A 60-month denominator 
in calculating basic event probabilities will be used.) 

3. Fault Tree Diagram Construction 

For the construction of the fault tree diagram the 
following baSic events are required. 

B. Person enters stairway with care 

meeeolippery surfaces of stair 

D. Inadequate railings 

E. Obstacles on steps 

F. Person enters stairway with no care (This basic 

event is the complement of B.) 

From those basic events (or combinations), the head event 
accident on stairway (A) is likely to occur as follows: 

Event B AND event C have caused 3 accidents in the 
past five years. 

Event B AND event D have caused 5 accidents in the 
past five years. 


Event B AND event E has caused 1 accident in the 


past five years. 








Event F has caused 2 accidents in the past five 
years. 
Thus events B AND C; OR events B AND D; OR events B 
AND E; OR event F is likely to produce the head event A. That 
is a stairway accident. 
Figure 9 is the fault tree diagram that represents 
the above situations. 
4. Basic Event Probabilities Calculations 
A 60-month denominator will be used in calculating 


basic event probabilities since it iS given so. 


Event C 
_ cao 
PB. 7 0.05 Accidents/months 
Event D 
J Sas ; 
Pa > 7 or 0.083 Accidents/months 
Event & 
P, = “ = 0.0166 Accidents/months 
Event F 
P = & =") 0.053 Accidents/months. 


The probability of event B is assumed to be l. 
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Figure 9: Example Fault Tree With Probabilities Assigned 
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EVALUATION OF THE HEAD PROBABILITY OF THE EVENT A 


Using 


n 
Les = tl- el (l-q,) 
1=1 
for the OR gates, and 
n 
aes 7 i Fy 


For the AND gates we get 


49 
i 


Pero) () — 0.0503) (1-0-0166) (1 —- 0.033) 


emo sj) 00. 907) (0.983) (0.067) = 1 =- 0.828 


0.1719 having an accident/months. 


SveAuUATION OF THE EXPECTED COST 
Since it is given that the negative utility for each 


accident is $200/Accident the expected cost is given by 


me {(C) moos) + 200(5) tez00(1) + 200(2) 


2 20.0 


EvVAuUATION OF THE ORIGINAL CRITICALITY 


Gye Ee (c) P, or 
Cees COO) (0.1719) = 378.18 
76 





EVALUATION OF THE NEW CRITICALITY FOR ALTERNATIVES 


ALTERNATIVE (1) 
New surfaces which will reduce accidents caused by 


slippery surfaces by 70%. That is Po reduces to 


- 30 = = £ 
ai fel 100 0.05 3% =e 0.015 


New head probability with alternative (1) is 


a9) 
it 


an eros) (i —- 0.085) (1 —- 0.0166) (1 - 0.033) 


Siemoe7o5 <0.91/ x0.983 x 0.967 


ime so = O.1414 


New Criticality with alternative (1) is 


C1) =e xeOc 44 = 311.08 
ALTERNATIVE (2) 
New railings will reduce accidents caused by inadequate 


failings by 50%. That is with alternative (2) P, reduces to 


_ 50 _ _ 
PD (2) = Py x oo. G06: 3. 5 OF O04 5 
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New head probability with alternative (2) is 


P (2) pete eee. Od) (1 —- 0.0415) (1 = 0.0166) (1 = 0.033) 


iO ).0.990) (0.983) (0.967) 


0.134 


New Criticality with alternative (2) is 


C, = 2200 x 0.134 = 294.8 
ALTERNATIVE (3) 
Signs and educational programs which are estimated to 
reduce railing-related accidents and obstacle related accidents 
meen by 20%. That is with alternative (3) both Py and P. are 


reduced to 


s Seas = cS jes 

PD (3) = Py x loo 7 O20es S GRawiGs 
7 80 _ 4 _ 

aay = Po x 100 = 0.0166 x 5 = OP eas 


The new head probability with alternative (3) is 


P 3) ear 05) (le 0. 060) (1 - 0.013) (1 - 0.033) 


omOmoomeOe soa x 0.987 x 0.967 = 0.153 
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The new criticality is 


C (3) =e OU eno. to3 = 336.6. 
5. Summary of Alternatives 
ALTERNA- ORIGINAL NEW BENE a COST/ 
VE COST Chart eCaAnlrTy CRELECALI TY (Savings) BENEFIT 
i See) Byo. 138 Seb 06 Gy =k Paes 
2 SS(Oe Syis as 294.8 83.38 55 S18 
3 S500 3705.8 83656 41.58 12 02 


Since the constraint of the safety budget is $1000 
safety performance will better increase by choosing alternatives 
meeewhich is best in terms of cost/benefit) and 1 (second in 
merms Of cost/benefit). 

To answer the question "Would an alternative invest- 
ment of $500 in another area that would yield a cost/benefit 


of 50.00 be justified?", may be answered as follows: 


Cost 


Benefit ae 50 Sine Se Cost = 500 


900 


=o = 10 should be found. 


a benefit of 
Since ORIGINAL CRITICALITY ~ NEW CRITICALITY = BENEFIT, then 
mots — NEW CRITICALITY = 10 and NEW CRITICALITY = 378.18 - 10 
= 368.18 which may be achieved by varying one of the branch 


probabilities to give a head probability 


Fie, 








2200 


5) ope) eas: 


iG 
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III. STATEMENT OF THE PROBLEM 


Already a variety of methods for evaluating safety perform- 
ance have been discussed covering most of the existing tech- 
niques in use today. 

From the above discussion it is apparent that this is an 
Open area for research and development of new methodologies 
that will permit major improvement in overall safety systems. 
To support this some general area problems will be presented 
and limitations of the methods that already have been dis- 
cussed will be considered. 

The first main problem is that today there is not in 
existence elther a unique methodology concerning safety 
evaluation or a unique measurement. That is, various methods 
exist and each one uses a different unit of measure. Some 
methods concentrate on rates, frequency or severity, others 
On indices, and others on cost or cost/benefit units. 

Second, proplems concerning most methods in use, is : 
lack of accepted minimum level of requirements. These require- 
ments are varying depending on management policy, existing 
regulations, budget constraints, and controllable variables 
of the working environment. 

Following is a brief overview of the literature survey 
methods discussed. The purpose is one of considering existing 
problems and limitations of these methodologies since those 
problems and limitations support the idea of the existing 


Problem of safety performance measurement. 
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A. FREQUENCY AND SEVERITY RATES 

The primary objective of this technique is to measure the 
injury experience of a corporation or its departments. Also 
we want to establish comparison criteria between departments 
or corporations for certain periods of time. 

This comparison between companies creates a problem since 
most of the companies do not want to lose their reputation 
and biased data could influence results. In appraising safety 
performance, several-year periods are required so that the 
behavior of the safety program is better traced. The evalua- 
tion of those rates is based on accident statistics after the 
accidents have occurred, thus we are not able to predict the 
influence that a safety improvement might have on the safety 
performance. Finally those rates do not give any cost or 
lost-time indications. Thus these rates should not be used 


exclusively as the only means of evaluating safety performance. 


eee cRLITLICAL INCIDENT TECHNIQUE 

The main objective of this technique is to identify the 
effectiveness through personal involvement. That is its 
effectiveness is biased by the personal willingness to report 
Memazardous situation. Also it does not provide what the 
Criteria are for measuring safety performance. Again we can 
not predict based on this technique for the amount of future 
improvement. For these reasons we may not adopt this as a 


primary method of measuring safety performance. 
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fa CONTROL CHARTS 

Beotting On a chart frequency of accidents (number of 
accidents per million man hours or accident rates) vs. time 
to show comparisons between various departments or to give an 
Merall picture of the safety program and to visually indicate 
gut of control situations is the primary objective of this 
nethod. Again since we are plotting frequency rate the same 
restrictions that were examined for the frequency and severity 
rates hold here. Thus control charts should not be considered 
as the only accepted means for evaluating safety performance 
Sut rather might be used as indicators for presenting statisti- 


sal data in graphical form. 


>. LEARNING CURVE 

A different approach to the problem of quantifying safety 
serformance was presented by utilizing the information pro- 
Jided by the learning curve due to learning experience. Again 
flere we can not rely on the learning effect for predicting 
future expectations of injury frequency at some future time 
Since there are other factors that influence the positive 
improvements due to learning effect. That is, overestimating 
Bur ability or careless behavior should not be ignored. Also 
a change in the safety program can not be predicted by the 


learning curve. 


fm oOAFETY SAMPLING 
This method may be considered as an improvement of the 


Sxritical incident technique. That is it eliminates the bias 
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introduced by the workers and can be used as an excellent 
indicator concerning supervisory performance and motivation. 
Some problems that can be seen are the following: 

In utilizing this method the most important act is that 
"of systematically observing workers in order to determine 
what unsafe acts are being committed and how often they are 
occurring”. But the workers become more attentive when they 
realize that their unsafe acts are recorded. 

Another problem is that this method does not account for 
the magnitude or duration created by improvements in the 


safety program. 


mo DOUBLE AVERAGE COMPARISON TECHNIQUE 

This method for measuring the effectiveness of a safety 
Srogram has not been widely adopted. The following reasons 
night give some explanation. For collecting necessary data 
lt is required to apply either the critical incident technique 
Ir the safety sampling methods. Thus, the problems already 
in existence with the utilization of these methods are intro- 
juced. The Achievement Index which is a function of the Short 
and Long range improvements depends on weighing constants that 
reflect "managements feelings as to the importance of Short 
and Long range improvements". This introduces a bias into 
the evaluation of the Achievement Index since it is the sub- 
jective feeling of management. 

Finally it has been pointed out that strong assumptions 


Smould hold for correct implementation of this method. That 


8 4 








me, during the period of data collection (suppose a 3 or 4 


years period) no change in the safety program has occurred. 


fee oLOLEMS ANALYSIS METHODS 

A wide range of approaches and techniques for analyzing 
the economics of the safety problems have been developed 
Such as the systems analysis approach, fault tree and cost/ 
benefit analysis approach, mathematical modeling approaches, 
etc. Those methods are uSing the concepts of utility or 
certain monetary equivalence (cost, losses, cost/benefit, 
etc.) as criteria for measuring safety performance effective- 
ness. 

Since it was found that the most commonly used approach 
was the fault tree cost/benefit analysis approach, more 
emphasis has been given and an extenSive presentation of 
its methodology has been provided. In this chapter some 
problem areas will be considered. 

In many instances large amounts of time are required to 
understand the process, identify hazards, create the necessary 
fault trees and even then oversight and omission problems may 
arise. Since fault tree analysis (FTA) can be complex and 
time consuming, in many cases computers should be used to 
gather information, and construct and deduce the fault tree. 
However, again there are no clear cut programs to fit any 
Specific case - thus the need for development of new programs 
might be necessary. Another problem in fault tree modeling 


@s that it is difficult to apply Boolean logic to describe 
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failures of system components that can be partially success- 
ful in Operation (1.e., a transmission system that might 
function, but not at a 100% level or leakage through a valve 
are two examples) and thereby have effects on the performance 
of the system. Another problem area is, that to apply the 
cost/benefit analysis quantitative evaluation of the fault 
tree 1S required. As a consequence in many cases we are faced 
with the problem to apply probabilities to the "man" since 
Maman failure or error cases is very difficult to be predicted 
and probabilities assigned. 

feea last remark it should be pointed out that fault tree/ 
cost-benefit analysis does not seem to be a proper methodology 
for evaluation of the overall performance of an organization 
but it is suggested for use in evaluating the effectiveness 
of specific areas, and particularly where there is an indica- 
Pron Of potential hazard. 

The review of various methodologies for measuring safety 
performance has indicated that further improvements in this 
area Might be attained if additional effort was focused on 
cost related measures that will account not only for the 
effectiveness of existing safety programs but also for the 
effectiveness of those programs that continuously are modified 
@0 meet future requirements based on passed experience. The 
next chapter will concentrate on meaSuring occupational 


Safety performance based on the above concept. 
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IV. AN APPROACH TO THE PROBLEM OF MEASURING SAFETY PERFORMANCE 


Before trying to approach the problem of measuring safety 
performance two questions should be answered. These are: 

a. Why measure safety performance? And 

b. If measuring safety performance is a requirement, 

then what should be the meaSurement criterion? 

It is not so difficult to answer the first question. There 
are many reasons dictating that measuring safety performance 
is a must. Measurement of safety performance provides a 
Beal by which to judge its contribution in achieving the 
overall goals of an organization. Based on these measurements 
future predictions can be made. These meaSurements contribute 
Mainly to control the current situation and predict the 
future. 

The second question may be answered by choosing among the 
Warious criteria that already exist such as the “frequency 
Meepeeeron Or “severity” or “cost” or "lost man hours", etc. 
The most appropriate criterion chosen here is the "cost cri- 
emo. The reasons for choosing this criterion are the 
mol lowing: 

a. it is an easily understandable concept by management. 


bee Lt iS appropriate in making comparisons among alterna- 


e. Tt iS an immediate indicator of the effective 


allocation of the safety budget. 
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d. Hidden costs become apparent and it becomes easier 
to trace whether we are moving within the bounds of the 
budgetary constraints. 

e. The safety function as a positive contributor to 
overall organizational efficacy will be more appreciated. 

After the criterion for measuring safety performance has 
9een eStablished an approach to the problem of measuring 
safety performance 1s possible. 

This approach can be based upon seven main steps. These 
steps can be patterned after OSHA requirements and are as 
soLLOWS: 

a. Preparation of the accident records according to 
Jecupational Safety and Health Act (OSHA) requirements. 

b. Coding of these data according to organizational 
structure to create an appropriate computer file. 

c. Determination of the total (overall) safety related 
cost. This is a current measure of safety performance. 

d. Determination of the average cost for each type of 
accident/incident. 

e. Data analysis to develop a safety model. Based on 
this model future accident predictions can be made, proviced 
Ehat no Significant changes in the safety program have been 
accomplished. 

memcomputation of an expected total cost figure. 

G. Cost/benefit analysis study of hazardous areas to 


identify alternatives to reduce the expected cost. 
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A detailed analysis to accomplish the above steps is given 


below. 
eecp (a4). Preparation of the accident records. Prepara- 


meon Of the accident records is a very significant step since 
the overall approach is initially based on this recordable 
mnformation. 

The following records are required to be maintained by 
each employer with over seven employees according to OSHA. 

a. Log of occupational injuries and illnesses OSHA form 
100 or 1LOOF modified (see figure 10). 

b. Supplementary record of occupational injuries and 
illnesses, OSHA form 101 (see figure 11). 

c. Summary-occupational injuries and illnesses, OSHA 
form 102 (see figure 12). 
Meeording to Showalter (1976) the log of recordable injuries 
ana illness (form 100) should maintain all recordable occupa- 
tional injuries and illnesses for that establishment. Each 
recordable occupational injury and illness should be entered 
into the log not later than 6 working days after the informa- 
tion about a recordable case has occurred. 

pence this record is sufficient to provide all necessary 
information concerning the present methodology instructions 
Ber completing each column of this form, according to OSHA, 
are discussed below. 

Column 1. Column 1 refers to Case or file number. Any 
number may be entered which will facilitate comparison with 


Supplementary records. 
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OSHA Na 10! Form approved 
Case of File No. -. OMB No 44R 1453 


Supplementary Record of Occupational Injuries and Illnesses 


EMPLOYER 
Ihe Name eee c ce eecoce ee ee ee ee asad IER ey oes e/a es ee dy ae ae es 
7, Siloti oki cae setts eRe eS So5eds ss aaa eS ee tree pe a 
iNo and sireet) 1 Catv of town) 1 State) 
SS mLocetionattrcdinerent tromiematl addtess: 2s. 20 - one a a ce oe cee ee ne cc cc cs docs ceeeocosuceccee 
INJURED OR ILL EMPLOYEE 
D1. MOG S5S66QS 5660645434865 a Social Security No. -...-..-2.---.---- 
{First namet ‘Middle namet Last name} 
LOMem Address: -eeeeee ere Lk Bala aa as Rania oe ae ee See ee ae ee ne IS a Rs 
(Noa and streett (City or town} 'Suate} 
hp Apete seen one eS foeed se AIMl@. 2 coc cae Penislésse-2 522,522 (Check one? 
BemCN Al OG ee eee eee oe a toe eos 2 ellos eee ee erou se uecneles eeucessce cece 
(Enter requler job title, aot the apecife arlivity he «39 performing at time of injury.) 
ie PGA ihe ee ee rns es alee aeons eee oo ee ie ee ee euse 


{Enter name of depertment or division in which the injured person is regularly employed, even 
though he may hase been temporary working in smother deperiment at the time of injury.? 


THE ACCIDENT OR EXPOSLRE TO OCCUPATIONAL ILLNESS 
PO mE Bre OLaCrI DOI Oe RPOsUNG:.. . —\cicicisicic do.cacn aun sccocucecucedes cuss cucecuccsaccsscesesse see 
‘No and street) (City or town ‘Stated 

If accident or exposure occurred on emplover's premises, give address of plant or establishment in which 
it occurred. Do not indicate department or division within the plant or establishment. If accident oc- 
curred outside emplover's premises at an identifiable address, give that address. If it occurred on a pub- 
lic highway or at any other place which cannot be identified by number and street, please provide place 
references locating the place of injury as accurately as possible. 

11. Was place of acerdent or exposure on emplover's premises? ~-.----------- (Yes or No} 

De ests nereMiDlOVerlUGIN@ When INJUTEd? 222 8K once cceccncccccecwscccccececsecseucsos~ os 

{Be specific. If he was using tonis of equipment or handling material, 


Se ee ee ee eee eee eee eee 


(ee TShO GAg) RD cOSISIof Gye es aes eee ee eee epee Mee eno ae 
t Describe fully the events which resulted in the inyurv of cecupstional iiiness Tell what 


mer eeee ew em eee mee eH eK Oe et ee ee eee eee Hee HMw Oe eK HO ee ew ewe HH ee KK PH ee HM Oe He HM Pe we ew oe et Oe ee He He eee ew www ew 


es erewe eee en re ew een He eee OOH HK HK Me Hee KK Ke ee eB OO OOO Se ee Be ee HB e OBE Bem eB eee we ewes eeeteres eee ewe te er wceece 


full deraiis on al) factors which led or contributed to the accident. Use sepaiaie sheet for additiona: space } 
OCCUPATIONAL INJURY OR OCCUPATIONAL ILLNESS 
14 Desertbe the injury or illness in detail and indic ste the part of body affected. -.....-..---.------- 
4eg.: smoputation of right indew Anger 


al second joint; frecture of rioe lead pomonine: dermatits of left hand, ete.) 
15. Name the object or suhstance «hich directly injured the emplovee | For cxample, the machine or thing 
he struck against or which struck him; the vepor or poison he tnhaled o¢ swallowed; the chemical or ra- 
diation which irritated his skin; or in cases of strains, hernias, etc., the thing he was lifting, pulling, etc.) 


Se eee etwetwan Se eee ee we KOO OS See SP eB Oe eH eee se eM eet Peee eZee ee ewes ee eres e cess eteewesee ee eee eee e-eseecee 


16 Date of injury or initial diagnoms of occupstionai illness ..........-.-.-0-4--------- eee eee 
(Dates 
17. Did emplovee die? _-..-------- ‘Yes or Nal 
OTHER 
LSS Warniemoendmaddreass clapnvstci@ni:..--o..52csos- 55-25 <6 < cc neu cc cscecacccocesscscccceccccuscns 
ier hospialied, némmeana addres. of hospital .........-. 6.222 ose cene coe eo cceccencccsuceeee 
Date of report ....----------+- Brenercdiby mttec Sta seen lite ee Me og oes: 
CCIGIMGOMNGG cascncncnsccnccnaas Scbunins 


Figure 11: Supplementary Record of Occupational 
Injuries and Illnesses, Form OSHA -101 


(Taken from Petersen, D. [1975], pg. 23) 
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Form Approved 
OSHA No. 102 OMB No 448 1453 
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Occupational Injuries and Hinesses 
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| Low Warkday eee 7 Nanlatsl Case Without | 
Lost Workdays® j 
SS maakt aS ae 
| i Number 
af Cases |} | Number 
| Number | Involving af Casrs 
of | Permanent | | Involving 
Injury and Illness Category Fataithes | Cases Transier to | Number of Number | Transier to 
Anaihee Joh | Loa of Another Jol 
or Termtee | Workdavs Cases | or Terme 
} tation of | | nation of 
Employment | Employment 
Category | 
2 3 $ | 5 6 ? a 
ee, Sapa ee 
| ] | 
10 , Occupational Injuries 
_ a — a + 
Occupational Iiinesses 
| | 
21 | Occupational Skin Diseases or 
Disorders | 
_ =|: <2 eae 
22 = Dust diseases of the lungs | 
{pneumaconioses! 
SS ye 
| Respiratory conditinns due to | | | 
toxic agents | 
pt eth ett —_— 
| 1 j 
Poisoning : j 
(systemic effects of tonic | 
materials) | 
| 











1 a | | 
2 | Disorders due to physical agents | | | | 1 | 


| 
{other than totic materials! ! } 











— — = ae : we eee ee ee ' 4 
Disorders due to repeated trauma | 
= ao, ee Ea ee a pee. | ee ee 
‘ ‘ 
29 ~—sOATl other occupational illnesses 
Se ae a eee Mey ey bee eee ee eee cee 
Totai—orcupational illnesses | i | 
| (21-29) | | | | 
en aaietiilineenastiineemnt ~ eee ee ee SE — 
| Total—~oecupationar injurses | 
elie |. oe 











*Noniatal Cases Without Lost Workdaye—Cases resulting in Medical treatment bevond frat aid, dismmous of orcunstional 
illness, lose of consciquaness, restricting of work or motion, o¢ ‘ransier io anniher iol (without iost warkdarel 


Figure 12: Annual Summary of Occupational Injuries 
and Illnesses, Form OSHA - 102 


(Taken from Petersen, D. [1975], pg- Zaly 
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e2tumn 2. Column 2 refers to date of injury or illness. 
For occupational injuries enter the date of the work accident 
Which resulted in injury. For occupational illnesses enter 
mae date Of initial diagnosis of illness, or, if absence 
Bccurred before diagnosis, the first day of the absence in 
connection with which the case was diagnosed. 

Column 3. Column 3 refers to Employee's name. First 
meme Or initial, middle initial, last name. 

Column 4. Column 4 refers to the occupation. Enter the 
Occupation title of the job to which the employee was 
assigned at the time of injury or illness. 

In the absence of a formal occupational title, enter a 
brief description of the duties of the employee. 

Column 5. Column refers to the department. Enter the 
name of the department to which employee was assigned at the 
time of injury or illness, whether or not employee was actually 
working in that department at the time. In the absence of 
normal department titles, enter a brief description of normal 
workplace to which employee is assigned. 

Column 6. Column 6 refers to the nature of injury or 
illness and part(s) of body affected. 

Enter a brief description of the injury or illness and 
indicate the part or parts of body affected. Where the entire 
body is affected, the entry "body" can be used. 

Motumn 7. Column 7 refers to the injury or illness code. 
Enter the one code which most accurately describes the nature 


Of injury or illness. A list of codes appears at the bottom 
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Bey che log. A more complete description of occupational 
injuries and illnesses appears below in "definitions". 

Column 8. Column 8 refers to fatalities. If the occu- 
pational injury or illness resulted in death, enter date of 
death. 

Sotumn JA. Column 9A refers to lost workday cases. Enter 
a check for each case which involves days away from work, or 
Mees OL restricted work, activity, or both. Each lost workday 
case also requires an entry in column 9 or column 10, or 
both. Column 9A is not shown in figure 10. 

Column 9B. Column 9B refers to lost workdays - days away 
from work. Enter the number of workdays (consecutive or not) 
on which the employee would have worked but could not because 
Of Occupational injury or illness. The number of lost work- 
days should not include the day of injury or onset of illness 
Or any days on which the employee would not have worked even 
though able to work. Note: For employees not having a regu- 
Meeey scheculed shift, i.e., certain truck drivers, construc- 
tion workers, part-time employees, etc., it may be necessary 
to estimate the number of lost workdays. Estimates of lost 
workdays shall be based on prior work history of the employee 
and days worked by employees, not ill or injured, working in 
Bae department and/or occupation of the ill or injured employee. 

Set 10. Column 10 refers to lost workdays - days of 
Bestricted work activity. Enter the number of workdays 


(consecutive or not) on which because of injury or illness: 
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1. The employee was assigned to another job ona 
temporary basis. 

2. The employee worked at a permanent job less than full 
time, or 

3. The employee worked at a permanently assigned job 
but could not perform all duties normally connected with it. 

The number of lost work days should not include the day 
of injury or onset of illness or any days on which the employee 
would not have worked even though able to work. 

Column 11. Column 11 refers to non-fatal cases without 
Post workdays. Enter a check in column 11 for all cases of 
@eeupational injury or illness, which did not involve fatali- 
ties or lost workdays but did result in transfer to another 
job or termination of employment or medical treatment, other 
than first aid or diagnosis of occupational illness, or loss 
of consciousness. 

Senumn i2. Column 12 refers to transfer to another job 
or termination or employment without lost workdays. If the 
check in column 11 represented a transfer to another job or 
termination of employment with no lost workdays, enter another 
Baeck in column 12. 

Benes additional instructions for completing this log of 
occupational injuries and illnesses with definition of terms 
for use in recording occupational injuries and illnesses will 
be discussed for completeness of step one. 

Initialing requirement. Each line entry regarding an 


Occupational injury or illness must be initialed in the right 
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hand margin by the person responsible for the accuracy of the 
entry. Changes in an entry also must be initialed in the 
affected column. 

Manges in extent of or outcome of injury or illness. If 
Meee] 2S a Change in an occupational injury or illness case 
mien artfects entries in columns 9, 10, 11 or 12, the first 
entry should be lined out and a new entry made. For example, 
if an injured employee at first required only medical treat- 
ment but later lost workdays, the check in column 11 should be 
lined out and the number of lost workdays entered in column 9. 
in another example, if an employee with an occupational ill- 
ness lost workdays, returned to work, and then dies of the 
illness, the workdays noted in column 9 should be lined out 
and the date of death entered in column 8. An entry may be 
lined out if later found to be a nonoccupational injury or 
illness. 

Meeinition of terms for use in recording occupational 
Myuries and illnesses. Definition of terms for use in 
recording occupational injuries and illnesses are as follows: 

Meetpational injury. Occupational injury is any injury 
Such as a cut, fracture, sprain, amputation, etc., which 
results from a work accident or from exposure in the work 
environment. 

Occupational illness. Occupational illness of an employee 
is any abnormal condition or disorder, other than one resulting 


from an occupational injury, caused by exposure to environmental 
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factors associated with his employment. It includes acute 
and chronic illnesses or diseases which may be caused by 
@inalation, absorption, ingestion, or direct contact, and 
which can be included in the categories as listed below. 

The listing that gives the categories of occupational 
ilinesses and disorders that will be utilized for the purpose 
of classifying recordable illnesses can be seen in figure 10 
under the term "illness codes". The identifying codes are 
those to be used in column 7 of the log. 

Recordable occupational injuries and illnesses. Recorda- 
ble occupational injuries and illnesses are any occupational 
injuries or illnesses which result in: 

1. Fatalities, regardless of the time between the injury 
and death, or the length of the illness; or 

2. Lost workdays cases, other than fatalities that result 
in lost workdays; or 

Pee Nontatal cases without lost workdays, which result in 
transfer to another job or termination of employment, or 
require medical treatment, or involve loss of consciousness. 
This category also includes any diagnosed occupational ill- 
nesses which are reported to the Agency but are not classi- 
fied as fatalities or lost workday cases. 

Peeon(>). Coding of the accident data. Coding of the 
@eerdent data according to organizational structure is a 
requirement for two main reasons that is, of storing the 


accident data in a computer for developing a “data bank", 
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and to be able to manipulate these data using a computer if 
necessary, to develop a safety model. 

Becing depends on information required to be stored for 
future use. Suppose that the following information is necessary 
to be stored concerning each accident. 

Year, month, day and day of the week that the accident 
Occurred. This information may be taken from the accident 
log. The day of the week may be represented by one of the 
integers 1 to 7 indicating the corresponding days Sunday 
Sarough Saturday. 

Other information needed to be coded are the occupations 
and departments. Two integer numbers with sufficient number 
of digits depending on the size of the company may be used 
Meecode this information. That is, if in a company with 80 
distinct occupations and 20 departments, two integer two digit 
codes are enough. Also the injury or illness code, number of 
deaths, lost workdays, and nonfatal cases without lost workdays 
as well as the cost of each accident may be coded and included 
Ba the computer file. 

The next step is to determine the total safety related 
cost of each accident from which the overall safety related 
cost for a year will be determined. 

In general the approach to this step is to evaluate the 
total cost of each accident as the sum of the two costs, 
direct and indirect, by following the detailed analysis as 
given below. The cost of each accident may be included in 


Mqe data file as discussed above. Another cost that will 
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be calculated is the average cost for each type of occupa- 
tional injury or illness as will be discussed later. 

Beep (c). Determination of the total costs. The total 
safety related costs of a company are composed of both fixed 


and variable costs in the following relationship. 


TOTAL COST = FIXED COST + VARIABLE COST 


The fixed cost term is the sum of three terms: Pao Pos P, 
where: 

Fy = The cost of safety related overhead, 

oa The cost required for compliance with govern- 
ment standards, 

F = The cost cf elementary long term hazards. 


3 


The variable cost term is that cost associated with, and as 
a result of some type of accident. It is the sum of five 
different terms, each of which is the total cost of all acci- 


dents of a particular severity. 


n m 5] k Hl 
MPRTABLE COST = ) A. + } B. + } C, + Y D, + 2} 
af i i a 
1=1 1=l1 i=l i=l 1=1 
with: 
n 
Y A, = The sum of A,, Aj, .--, A, for the first, 
; a. iL 2 n 
i=l 
second, third, etc., accidents of type A. severity. The same 
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m 5 k al 
holds for ) B: ' ) C7 wi Br ) E; where 


n 
) A; = Total cost of accidents where most severe 
1=1 


injury resulted in a permanent total disability or death, 


m 
) B; = Total cost of accidents where most severe 
1=1 


injury resulted in a temporary total disability requiring 


absence from work for more than one week, 


J 
) C; Total cost of accidents where most severe 
i=l 


injury resulted in absence from work for less than one week, 
Ik 
) D; = Total cost of accidents where most severe 
i=l 
injury resulted in absence from work for less than one day, 
al 
) E, = Total cost of accidents where there was 
i=] 
no injury but material damage occurred or production was lost. 


The total cost equation can be written with all its 


components as: 


n m z k ; 
meme, COST = F. +F, +F,+ }A, + } B, + J} C, + ) D, + 
ee See et i=l > (iS! 
where: 
n+m+j+k+dil1 = Total number of accidents over 
a year. 
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A series of data collection worksheets were developed to 
Meee accurate figures for input in the total cost equation. 
The first worksheet was designed to obtain the values associated 
with the fixed cost term of the equation. The second work- 
Sheet waS an exhaustive survey of accident related costs 
Ber input into the variable term of the total cost equation 
(see figures 13 and 14, worksheets one and two). 

so far a measurement technique of safety performance has 
been developed expressed as the overall safety related cost 
Or "Total Cost" paid by a company ina year. Comparisons of 
this figure with previous years "Total Costs" enables the 
Management to appreciate the effectiveness of the safety 
program and contribution of safety department to the company's 
goals. 

To appraise the effectiveness of current safety programs 
an "Expected Total Cost" figure should be developed. 

Step (d). Determination of the average cost for each 
Meer Ot accident. Determination of the average cost for each 
type of accident may be accomplished by utilizing the following 
logical approach. Based on the information collected using 
the worksheets discussed above, average cost for each type 


mee accident A, B, C, D, and E may be computed as: 


Cn (AV) Average cost for type A accident 
Py oe P, 32 P, l n 
et SY A, 
nhemt+jrtke+l n ;2) 1 
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WORKSHEET ONE 


DETERMINATION OF FIXED COSTS (ANNUAL BASIS) 


Fixed Cost = F, + F. +F 


i 2 5 


Overhead costs 
Insurance Cost 


(Future insurance cost can be estimated by 


projecting previous years insurance cost.) 
Safety Department Salaries 
1. Primary safety personnel safety 
director's salary 
BP@econu Ss Salary (1f applicable) 
Nurse's salary 
Other primary safety personnel 
2. Secondary safety personnel 


Attendees at safety meeting 
(Number of hours at meetings times 


hourly wage plus travel expenses) 


Percent Cost of company overhead for safety 


office (space and equipment) 
Safety Department operating budget 


Hiring cost incident to safety 


(x-rays, medical/psychological exams) 


In General other fixed expenses (Depending 


on the structure of the company) 


wota ). Py Cost 


Figure 13 
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GOVERNMENT COMPLIANCE COST 


Safety Equipment 


(If not included in safety department 
budget) include protective clothing, 
Giecgues, Snecs, Ctc.; fire fighting 


equipment (purchase and maintenance) 


Training 


1. Cost of training personnel to 
comply with OSHA or other 
government standards (include 
manhour cost of instructors 
and employees plus training 


material) 


PeOncOtme training (First aid, 
g@miver tralning, etc.; 
Peilucde mManhour cost of 
instructor and trainee 
plus cost related to this 


training gas etc.) 


Bweeest Of drills (fire fighting 
etc., include manhour times 
plus ail the related to the 
acull costs) 


Cost to acquire or remodel equipment 
moO meet OSHA or other, government 


standards 


Total P, Costs 


micgice loa (Continued) 
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mr. 6UFF 


Elementary Long Term Costs 


Cost to eliminate long term occupational 
or health hazards (if not included 
previously), include research costs, 
inspection and monitoring costs (manhours 


times wages, etc.) 


Sects celeated £€O environmental 
protection measures 


®Potal FP, Case 5 


Torale faxed Cost (Fy ~ F, 1 F,) 5 


Given that we have traced these fixed costs for previous 


years we may eaSily predict the expected fixed cost of next 


year based on these figures. 


Figure 13 (Continued) 
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WORKSHEET TWO 


DETERMINATION OF VARIABLE COSTS (FOR EACH ACCIDENT) 


Type of Accident 


A. 


Most severe injury resulted in 


permanent total disability or death. 


Most severe injury resulted in 
temporary total disability or 
absence from work for more than 


one working week. 


Most severe injury resulted in 
absence from work less than one 


week. 


Most severe injury resulted in 
absence from work for less than 


one day. 


No injury but material damage 
occurred or production time 


was lost 


Wages lost 


A. 


Lost time wages - personnel other 


than the injured workers 


1. Non-injured workers who assisted 
the injured workers (hours off 


job times hourly wage) 


2. Non-injured workers who stopped 
work to observe the happenings 


(hours lost times wages) 


Figure 14 
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Non-injured workers who 
stopped work due to machinery 
shutdown or until replacement 


was obtained for injured worker 


Lost time wages - injured personnel 


Le 


ico time on Job on day of 


occurrence (hours times wages) 


Wages for subsequent days 


absent from work. 


Wages for hours lost for 
medical treatment after 


returning to work 


Percent wages lost due to 
decreased output after worker 


returned to job. 


Lost time - Supervisors 


Ike 


Lost salary/wages in direct 
Piveolm~ement With accident 
(On scene assistance or 


supervision) 


Salary/wages required for 
Filling out necessary 


reports and forms 


Lost time - higher level management 


(includes lawyer of the company) 


We 


Direct involvement with accident 


(salary rate times hours spent) 


Time devoted to follow-up function 
(meetings, investigations, not including 


fixed cost of safety department) 


Figure 14 (Continued) 
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oti. 


A. 


Mieea@e—Up wages 


ie 


Wages of personnel required to 
get plant back to normal 
operating speed 


Overtime wages (if necessary) 
caused by getting plant back 


into normal operation 


Wages of personnel brought 


in to clean up accident area 


Wages of personnel brought 

in for non-productive 
observation/monitoring (securing 
guards, fire watches, observers 
ZO ChSUre pressure, temperature, 


etc., are maintained) 


EmOoacuction Lost 


If lost production was recouped 


sie 


Overtime wage rate differences 


to recoup lost production 
Supervisors salary for overtime 


Utility costs required for overtime 


lost production was not recouped 


ValwesoLeqgoods, lost 


Cost to purchase goods or 
materials from other companies 
Eemeontinue with production 


or meet deadline 


Figure 14 (Continued) 
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wey. FOllow-up Costs 


oi. 


ae 


B. 


Cost of OSHA fines 


esc Of Production lost due to 


government shutdown 


Cost of obtaining replacement 
for injured worker (hiring cost 


ena training costs) 


Production loss due to replacement 


worker operating below normal output 


Lost wages due to retraining other 
personnel in new or correct procedures 


as a result of accident. 


Medical Cost (other than insurance) 


Doctor and hospital bills 
Costs of medical treatment 


Costs of prosthetic devices 


(wheel chair, etc.) 


Cost of altering work area to 


retain disabled worker 


Anticipated (estimated) increase 
in insurance rates as a result of 
accident (based on a loss 


experience modification factor) 


Equipment Cost 


fie 


Replacement or repair of 


damaged equipment 


Cost to redesign or build equipment 


(to remove/correct hazards) 


Figure 14 (Continued) 
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See cost €O rental equipment required 


EOmeontLinued production 


mer. Off-Job Accidents 


A. Wages lost due to absenteeism 


because of off-job accidents 


VIII. Other Costs 


A. Lost profit on orders lost due 


to accident 
B. Loss of bonuses to company 
ee Demurrage cost 
Seeeelost profit due to loss of reputation 


E. Loss of profit due to labor strikes 


TOTAL VARIABLE COST 


Figure 14 (Continued) 
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CB (AV) See erage@eost for Eypers accident 


_ a + Ps a P3 - l 5 . 
n+m+jtk+1 mM 521 al 


Co (av) Average cost for type C accident 
ee? 3 i 
n+m+jt+k+4+1l1 ec 

Ch (av) Average cost for type D accident 
_ a - F. + F, me if ; - 
ntm+j+k+1l1 Kee ea) 

1=1 
Ce (AV) Average cost for type E accident 


Fo + F. + F, _ 1 ; 
nemt+j+k7+1 i 1 


an 


= at 


a 


al 


Since those average costs are approximate figures for 
each type of accident a better approximation may be achieved 
utilizing the data of as many years as possible. 

Step (e). Data analysis study. Data analysis study 1s a 
Major step of this approach since by analysing the safety 


data information concerning accidents versus occupations or 
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departments or days of the week, etc., may be extracted. 

Mhis will help to identify hazardous areas. Also the accident 
model may be developed. This model is likely to follow a 
"Poisson process" or might be a linear or non-linear regression 
model depending on the shape of the accident sample distribu- 
tion. The development of the accident model enables the 
decision maker to make future predictions concerning the 
expected number of accidents. Thus, the computation of an 
expected cost figure which in the next step becomes feasible. 
The use of a computer might be a required tool for completion 
of the data analysis study. 

eeee (f£). Computation of an expected total cost figure. 
Computation of an expected total cost figure based on the 
information gained from steps d and e are as follows: 

1. Having estimated an average cost figure for the 
various types of accidents and having developed an accident 
model the "Expected total cost" can be found as a function 
of the expected number of accidents and of the various average 
S@ets. This "Expected total cost" figure is a measure of 
future safety effectiveness Since it indicates the expected 
Seal accident cost of next year, assuming that there are no 
changes in the safety program. 

feeetnas figure can be improved by utilizing the cost/ 
benefit analysis of the last step. 

Step (g). Cost/benefit analysis. Cost/benefit analysis 
as discussed in Chapter II.G should be conducted for the most 


hazardous areas. This analysis will identify which alternatives 
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have the best cost/benefit figures. Adopting these alterna- 
tives a reduction in the number of the accidents should be 
expected. Thus a new expected number of accidents should be 
considered and a "New expected total cost" figure may be 
estimated. 

This concludes the proposed methodology to the problem of 
measuring safety performance. It becomes apparent from the 
above discussion that it is not a clear cut methodology and 
a lot of work and time should be devoted to develop the various 
steps. The difficulties such as correctly completing cost 
worksheets; assigning probabilities to human beings and 
determining the potential for human error during the develop- 
ment of the cost/benefit step; developing the proper accident 
model, etc., will be faced and should be overcome. 

But regardless of these difficulties this methodology 
is a logical approach to the problem of measuring safety 
performance. 

The following chapter deals with the analysis of real 
Occupational safety data of the civilian personnel of NPGS. 
The given data were collected as described in step (a) above. 
They were coded as per step (b) and were analyzed as per 
step (e). Finally some problem areas concerning the analysis 


of real safety data are discussed. 
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Ve ANALYSIS OF REAL SAFETY DATA 


The occupational injuries and illnesses data of the 
Givilian personnel of the NPGS for a period of four years 
975-1978) were studied. 

The purpose was to indicate with real safety data how 
the steps of coding and analyzing real safety data may be 
BecOmplished in a particular case. These steps with the 
cost/benefit analysis step as already discussed in Chapter II.A 
are major steps in the proposed methodology. Second, to 
appraise that today's needs require the safety manager to 
be supported by safety analyst personnel. 

The data have been taken from the existing files in the 
NPGS “Log of Occupational Injuries and Illnesses" OSHA no 
BOO and LOOF modified. 

Coding of the data. The coding of the data was performed 
as follows. Three codes were developed, one for the days 
of the week as presented in table II, one for the occupations 
as presented in table III, and a last one for the departments 
as presented in table IV. The last two codes were based on 
mae Log information, thus it is likely not all the occupations 
nor all the departments are included. The coded information 
along with some additional information taken from the log 
were stored in a computer file, in the following structure. 

Computer File FTOI1FO0O1. This file contains the given 


accident data which have been sorted in ascending date order. 
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Beewas then observed that a small percentage (about 10%) of 
me, cOSt accidents had occurred on the same day (ties). 

@ence the tied accidents were accounted for only a small 
percentage of the overall five years data and since no one 
Beetnose produce any total or partial workday loss they were 
eliminated. The file was structured as follows. Columns 
Meeererer to the date of the accident (year, month, day), 
column 4 designates the day of the week according to code I. 
Column 5 corresponds to the occupation based on code II. 
Column 6 corresponds to the department code III. Column 7 
corresponds to the injury or illness code of OSHA, and 
merumns $8, 9 correspond to the total or partial lost work 
days respectively. 

Semputer file FTO2FO0]1. The structure of the second file 
is just a one column four vector structure which represents 
the interarrival times in days between accidents, and is 
separated into four parts (vectors) each of which corresponds 
memene year period (1975-1978). 

Paeye2ing the data. With the use of an IBM~360 computer 
the following work was completed. 

1. Five tables were produced for: the 7 days; 12 months; 
@ years; 72 occupations and 45 departments. In those tables 
information concerning the total number of accidents (TOT-AC), 
the type of accident (Types A, B, C for accidents that did 
not produce any work days lost, that produced partial days 


Jost and that produced total days lost respectively), and 
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the total number (TL-DAY) and partial number (PL-DAY) of 
days lost are available. 

fee eveloped the following 5 charts for years, months, 
weeks, occupations and departments vs total number of acci- 
dents, total and partial days lost. 

weeeatstograms of the interarrival (or interevents) 
times of the accidents were developed for each year and each 
week in order to gain an understanding of whether the acci- 
dents were following any particular distribution pattern. 

For some weeks, where the sample sizes was too small, that is 
less than 10 accidents, it was not possible to get a histo- 
gram. With the histograms all the information concerning 
central tendency, spread, higher central moments were avail- 
able. 

4. Having developed the histograms it was reasonable to 
assume that the distribution of the interarrival times of 
each year were following an exponential distribution with 
means Wy = 6.471, Wy = aaa o> U5 > 5, Lb and vos DOS. Or 
Pie accidents of the years 1975 through 1978 respectively. 
For verification of the above a Kolmogorov-Smirnov test was 
performed by means of the NKS]1 existing library subroutine. 

Results. Results based on the above work were as follows: 
‘From the developed tables and charts more accidents occur on 
Fridays and less on Sundays and Saturdays but more or less 
the number of accidents is evenly spread during the week 


days Monday to Fridays. 
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Concerning the months, January and December are the 
months with lowest frequency of accidents where February 
and November are those with the greatest frequency. But 
again more or less the accidents are evenly spread during all 
months. Concerning occupations those with the largest number 
Of accidents are the clerks, laborers, pipefitters, gardeners 
and food service employees. A total number of 409 work-days 
lost and 28 partial-days lost occurred. 

Concerning departments those with the largest number of 
accidents were the Public Works, Naval Exchange, COMO and 
supply departments. 

Cost Analysis. A cost analysis was performed based on 
rough cost figures given by the safety department of the 
NPGS. Those figures were an average direct cost of 8.38 
dollars/hour for every occupation and the amount of 300 
dollars for a "back case" injury which roughly speaking repre- 
sents the medical bills. 

Based on the above given figures it was not possible to 
determine a total cost figure as discussed in Chapter IV and 
Smly a rough total cost estimate was evaluated as follows. 
Daily average direct cost figure = Average hourly cost x 
8 hrs = 8.38 x 8 = 67.04 dollars/day lost. 


Since there were 


409 total days lost x 67.04 dollars/day lost 


—eerrcl9.36 dollars, and 
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Since there were 


67.04 
2 





Pe partial days lost x ( ) dollars/half day = 938.56. 
Thus rough average total direct cost = 27,419.36 + 938.56 
zo ,55/.92 dollars. 
fuemeoor Accident Model of the NPGS (from 1975-1978). 
According to Ross (1970) a stochastic process {N(t), t > 0} 
is said to be a counting process if N(t) represents the total 
number of events which have occurred up to time t. A particu- 
larly important counting process is the Poisson process 
defined as follows: 
The counting process {N(t), t > 0} is said to be a 
Poisson process if 
fe N(O) = 0 
(b) {N(t), t > 0} has independent increments. That is 
the number of events which occur in disjoint time 
intervals are independent 
fe) The number of events in any interval of length t 


is Poisson distributed with mean At. That is, for 


oe Ss, &€ > 0 


=rt (aAty” 


Pr{N(tts) -N(s) =n} = e a ee ce? 


From condition (c) it follows that a Poisson process has 


stationary increments, that is the distribution of the numbers 
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of events which occur in any interval of time depends only 
on the length of the time interval, and also that 
E(N(t)] = At and A is called the rate of the process. 
The following theorems concerning the Poisson process are 


Besential for the establishment of the accident model. 


Pheorem 1. If {N(t), t > 0} is a Poisson process then the 
inter-arrival (or inter-event) times ee ab (Ol 
are independent identically distributed exponential 


(r) 


“ae So = Ty + T, 2 = = Tn te ee a é tT 
De eeeeet—“‘“COSSSCOCONNCNC 
oF uy: a 


Morollary 1. If ALG t > 0} is a Poisson process then the 
waiting times Sa dey ar boc sete ea ce 


Gamma distributed with parameters n and . 


Theorem 2. If the inter-event times {T., 1 2 iby ele et 
counting process tN, , t > O} are independent 
identically distributed Exponential (i) then 


{N(t), t > 0} is a Poisson process with rate }. 


To develop the accident model of the NPGS it was assumed 
that N(t) = the number of accidents which have occured at 
NPGS at or prior to time t, where the time t is measured in 
days. 


fi Ab 


ieee 1 represent the interarrival (or 


50 Dy > 1p eee ee 


inter-event) times of the first, second, third, ... accidents 
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then those interarrival times are independent and identically 
distributed. Examining these interarrival times for each 
year separately and having performed the appropriate 
Kolmogorov-Smirnov tests (see summary of results in table V) 
we accept the hypothesis that the interarrival times are 
independent and identically distributed random variables 


each with an exponential distribution with mean W, = 6.4716, 


ama. 329, = 5.166, Soe LO OCA = Gre) amt A 


P2 nz Uy 1 2 


(A. = 0.19) (A, = 0.19), where Wye hs are the mean and 


parameter of the exponential distribution of the data of the 


och 
m year. 
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Mis according to theorem 2 above, each year from 1975 to 
1978 the occupational injuries and illnesses models were 


following a Poisson process, with rates 


Ay —spermes accidents/day for 1975 
A» =—eGee2 accidents/day for 1976 
= peel o acelcents/day tor 1977 
hy =e Oeacecidents/day for 197s 


Based on these findings we may consider that the 1979 
accident model is likely to follow a Poisson process with 


mate 
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Computer Programs. Basically three computer programs were 
developed named as B, DS, and C. Program B was developed 
£0 Calculate the interarrival times of the accidents. 

Program DS was developed to produce the necessary tables and 
plots as already discussed. Program C was developed to 
produce histograms and perform Kolmogorov-Smirnov tests as 
discussed. 

Discussion and conclusions. Having analyzed a four year 
accident data of the civilian personnel of NPGS it was found 
that the 1975 accident model was following a Poisson process 
with rate A = 0.15. This was based on a Kolmogorov-test 
where at a level of significance a = 0.10 the accident inter- 
arrival times were accepted to be exponentially distributed 
(A = 0.15), thus the process as already discussed was Poisson. 

Based on the same argument it was found that the 1976, 
1977, and 1978 accident models were Poisson distributed. 

By utilizing these results it was found reasonable to predict 
the 1979 accident safety model as Poisson distributed too. 

The validity of this model, as well as most accident 
models, for future predictions is based upon the assumption 
that no change in the safety program has been accomplished. 

If so the expected number of future accidents may be predicted. 
But in general this might not be true since the moment an 
accident occurs or after the investigation process of an 
accident have been completed some causes and problem areas 


become apparent and correction measures are established. 
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Those measures influence the model and future accident pre- 
diction becomes a problem. But at least this model can be 
used aS an upper bound for future expected accidents since 
any corrections made will result in accident reduction. 
Another problem area is that in general the model will not 
Mecount for each type of accident but only for the total nunm- 
ber. In such a case further analysis of the accident data 
might be necessary to determine the distribution of each type 
of accident. In cases where there is insufficient accident 
data, separate distributions for each type of accident might 
not be feasible. Statistical accuracy requires a large sample 
Size. Similar accidents occurring on like equipment may not 
be frequent enough to yield accurate estimates of probability. 
Another important factor that influences the development 
of an accident model is the complexity of the structure of 
the organization. That is companies or organizations with 
more homogeneous activities should be modeled much more easily 
than those with complex and different types of activities. 
Thus the need for studying and continuously analyzing the 
accident model is a must for complex organizations. By sub- 
modeling a complex organization, that is by dividing the 
Organization into homogeneous subsets (such as same depart- 
Ments, Occupations, etc.) each of which is easier to be 
modeled separately. Developing those individual models the 
safety efficiency of individual departments may be studied 


as well as the overall safety corporate efficiency. 
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Though the modeling aspect is in many cases complex and 
the findings are approximations based on the assumptions of 
certain probability distributions nevertheless close and 
continuous study of accident data reveal a lot of information 
which will help in prevention of accidents as well as estima- 
tion of the cost due to such accidents. 

This safety performance field is an ever expanding area 


for future research and development. 
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Code I. Coding the days of the week 


Code Day 

al Sunday 

Z Monday 

3 Tuesday 

= Wednesday 
5 Thursday 
6 Friday 

7 Sal lise ary) 





23 
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Code II. 


Code 


Ol 
QZ 
03 
04 
05 
06 
07 
03 
09 
10 
HEE 
2 
aie 
14 
15> 
is 
dey 
18 
19 
20 
ZA 
ype 
25 
24 
25 
26 
Z/ 
26 
29 
30 
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Coding Occupations 


Occupation 


Pipefitter 
Driver 

Laborer 

Service station 
Waitress 
Machinist 

EMD Supervisor 
Open mess Employee 
PW Grounds 
Cook/waiter 
Sales clerk 
Model maker 
Carpenter 
Cashier 
Gardener 
Dishwasher 
Painter 
Mechanic 
Fireman 
Personnel off. 
M.E. Technician 
Chemist 
Meterologist 
NAVEX Storeman 
Professor 
Pestcontrollman 
Ser. Sta. Attend. 
Warehouseman 
Plate maker 
H.F. lab worker 
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Code 


31 
BZ 
8)8 
34 
5) 
36 
Be 
oye 
50 
40 
Al 
42 
43 
44 
45 
46 
47 
48 
49 
a0 
ay IL 
2) 
2).8 
54 
aie) 
56 
5] 
58 
2), 
60 
61 


Occupation 


Boilerman 

Pantry person 
Draftsman PW 
Electronic Tech 
Food Service Wk. 
NAVOCEAN REP. 
Security Oriilcer 
Crane operator 
Foreman Aero 
Plumber 

Computer Tech 
Truck Driver 
Manager 

Pest Cntrilman 
Maintenance worker 
Cashier checker 
General Helper 
Ships mate 

Shop planner 
Bartender 

Child care Attendant 
Aero technician 
Yoc 

Janitor 
Greenskeeper 

Migul Gali e 
Visual Display Art 
Library Tech. 
Voucher Examiner 
Household Goods Inspector 
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APPENDIX A 


BOOLEAN ALGEBRA BASICS 


DeetINITIONS ~- SYMBOLS 

Variables: In Boolean algebra are considered the 
Bobjects, classes, or elements (symbols are letters A, B, X, 
mec.). 

Universe: The entire collection or group of all the 
variables under consideration 

" + " = Read as OR is used for the OR operation 
= Read as AND is used for the AND operation 

~ = Read as NOT (negation) is used for negation. 

For example A (Read A NOT) means the opposite of A that is 
if A had value 0, A has the value 1 and vice-versa (Or true 
Maa not true instead of 1 and Q). 

Null and All Elements (@ and I): represents all the 


messes that do not and all the classes that do exist 


respectivelv. 
SUMMARY OF BOOLEAN IDENTITIES 
X+0 = X(@ is always 0) X°-Y = Y°X 
X+1l = 1(I is always 1) Kei 2) = Oey 
AtX = X X(Y¥°Z) = (X-Y)Z 
oe = 1 X(Y+Z) = X-Y+X-Z 
X-l = X X+X*°Y = X 
ras = 0 X(X+¥) = X_ 
X°X = X X+¥°Z = (X+Y) (X+Z) 
ioe = 0 X+X-Y = X+Y 
X+Y = Y+X X°Y = X+Y 
K =x er = 
hee + X°Y = X 
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8 26 5 L 20 45 4 
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PROGRAM "DS" TO PRODUCE 


TABLES AND PLOTS 





Laz 





OD OF OS Oe eS es ae oe 


al 


se Se see se A ok fe oc he he ak aK ote oe fe ake ae oe oe Eo oe ee ae ae Se ok oe oe ae oe oe ae oe ak oo ok oh oR a ea ok oe ok 
eeeearis FS INPUTS THE ACCIDENTS ACCORDING T9 THE * 
eee OVO NGICAL Q@CCURANCE AND PRODUCES TABLES CF 
*ACCIDENTS FOR WEEKS—-MGNTHS-YEARS-OQCCUPAT IONS- 
*DEFAR™MEATS.ALS QO PRODUCES PLOTS OF 

ease oe vs NO OF &2CIDENTS:TOFAL AND PARTIAL DAYS LOST* 
*MONTHS VS THE ABQVE * 
mee Ys OF WEEKS VS THE ABOVE * 
peSGCCUPA® TENS VS HE ABIVE 
[wEPARTMEMTS VS THE ABOVE 


bam FRPP PE TPF ET PEF EF PT PFE PP EE PRA CHET TT FREESE EE TET 


5: Sg 


+t 


4 


INTEGER*2 FORM(27),YE(3).MON(3) ,GQCCUP(3),0E° (3) 
CIMENS ION IDAY (7,7), IMDN( 12,7), TYEA( 4, 7), TOCC (72,7) 
LIDES( 45,7), TRE 
eee 9) X( 72), Y(12),2(72) »4172) 
CATA FORA/2H DyZHAY,2HS 42H 3 2HT9s cHT—» 2HAC;s ZH) oy 2H 
LTY; 
SemrPbgee—-AyZH 32H Y s2ZHPEyZH-B8+2H 32H Y, 
mere ey2H-Cy2H 
gecadt» ZH—-D , ZHAN YY, 244 92H PL »2H—-D »2HAY/ 
Dara YE/ZH YsZ2HEA,Z2HP / 
CATA MON/ 2HM9, ZANT y 2HHS/ 
CATS OCCUP/2HOC, 2HCL,y2HP / 
DATA DEP/ 2HDE »24PA,2HRT / 
DATA IDAY/49%0/,IMIN/84 *0/, LY EA/28 #0/5 1DCT/ 50470/, 1D 
mee, 215%0/ 


meee INDEX GN FIRST COLUMN DF EACH TABLE 
C9 2 [=1,72 
le( 1.67.4) 69 T2 11 
IYEA(T,1) =] 
more or et ) GOTO 12 
IDAY( 1I,1)=1 


i535 





iz iGeesct «1 2)eGO) TO 13 
IMCA (I ,1) =I 


ie PPC1.67 45) GO 7) 14 
IDEP( 1,1 )=1 

14 LlocC( 1,1) =! 
CINT INUE 


Meme: TABLES FCR DAYS MONTHS YEARS OCCUPATICNS 
Ce UEP FRTMENTS 
10 READ(1L,1LU0,END=20) (TREC(I) »1=1,9) 
tmreee( l).60.0) GO 19 10 
100 FORMAT (9( 12 »2X)) 
C00 1 J=2,7 
THELP=IREC(J+2) 
Mars eGEsG) GO TI 30 
meres 2aeNU-IREC(38).E9.0) GIF 1 
fete EOS eANDSIREC(9).E0.0) GOTO l 
Mateo Ie nO et L2EC(8) NE-O.OR-IREC(S).NE.0)) GD TO l 
IqdELP=1 
30 IDAY (IREC(4),J)=IDAY (IREC(4),J)+I1bELP 
mein TIRES (2), JJ=IMON(IREC(2),J)+1HELP 
Mrea((lRECG(1)-74), J)=1YEA((IREC(1L)-74),J)+IrEt® 
Pec (IRECI5),JI=~ITOCC(12°EC(5),J)+I1F ELS 
Mines (oy, J J=-1DE°(IREC( 6) .J) +1 HELP 
1 CIN TINUE 
ce -C bo 


C 
C Meee the INJURIES FGR DAYS MONTHS YEARS OCCUPATICNS 
C DEPART NENTS 


20 wR ITEC 6,201) 
210m Berea d( LHisZ2@Xs////,07TX,* TABLE FOR CAYS JF WEEK", 
in/ / ) 


WRITE (6, 300) FIRM 

300 FOIRMAT( 4X 92 TA2) 
WAITS E(6,200) (CIDAY (I,JS),J=1,7),71=1,7) 
Welt E(6;3 01) 





BO 1) 


16 


401 


et 


BO 


13 


ei} 


aS 


200 


ower « CO 


foe Al ( LH Leeks //// 3 LAX, ' TABLE Or MONTHS 


7) 


CO 16 JT=l 3 

FURM(I)=“MON(1) 

CONTINUE 

WRITE(6,300 ) FORM 

Mert eE(Gy200) (( IMON(1,J),J=1, 7) »1 =1,12) 
WRITE( 65401) 

FORMAT (LHL 2X 9// SS 4 17Xy ! TABLE ale YEARS 
Ds 1? I=1,3 

FIRM( 1) =YEC1) 

CONTINUE 

Wea? E(653007F ORM 

WRITE(O,2C0) ((IYEACT J) »J=1_7) pL=1 54) 
WRITE (6,501) 


I) 


FORMAT (LHL y2X y//// y17Xy ! TABLE OF JCCUPATION', 


7 } 


09 18 I=1 33 

mem (1 d= ICCUP(T) 

CON TINUE 

WRI™E(6,300) FORM 

Mee E(6,200) ((IDCC(CIs,J),J=1,7),1=1, 72) 
WRITE(6,6C1) 


FURMATULAL s2X 9//// 91 7X y! TABLE Gr DEP ARTIENTS ! 


Ly//) 


Be 1S f=1;3 

FORM( I) =DEP(T) 

eeNiTINIE 

WRITE( 63300) FORM 

WRITE(69200) ((IDEO(IyJs),J=1,7),7=1545) 


FIRMAT (7X, 129 5%, 13 5X_y13y5X yi 39 5X_13y 4X_y 157 2XyqI 5) 


meen NUMBER PF ACCIDENTS VS DAYS OF WEEK, YEARS, 
Secu PAT IONS AND DEPARTEMENTS. 


vO & J=1,5 


55 


AINTHS» 





Tal 


Be 


o 3 


in 


94 


25 


Gum @ (91 592993 194%, 95); J 


m3 i=1,4 
es 

Y( 1) =IYEA(1»2) 
Z2( 1)= 1YEAC1;6) 
WC IJ=IYES (1,7) 
CONTINUE 

N=4 

Gaeta 39 

foe L=L, 2 
mod) =1 

Y(I1) =IMON(I,2) 
2(1)=IMON(1y5) 
W( I1)=IMON(1y_ 7) 
CONTINUE 

N=12 

G} 79 99 

pos [=147 
Ae) =1 

YC I) =IDAY (172) 
2(1)=IDAY (1,6) 
W(I)=IOAY( 1,7) 
CONTINUE 

N=7 

e279 99 

meme =1, 72 
Mer ) =I 

fae }=10CC(1+2) 
mie = 19CC 11,6 ) 
WOT )=1OCC(I,7) 
CONTINUE 

N=7 2 

GJ 70 99 

f) 7 1=1,45 
i) = | 
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